Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Devklan Component: Alma Blog Clear all filters
TI-2024-01063 CVE-2024-1146 · GHSA-fv3m-jf9j-44vh

Cross-site Scripting at Alma Devklan Blog

Priority LOW 27

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2024-03-19 No fix listed CWE-79
TI-2024-01062 CVE-2024-1145 · GHSA-h7jv-6rq7-jwqh

Observable Response Discrepancy at Alma Devklan Blog

Priority LOW 31

User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00487 Published 2024-03-19 No fix listed CWE-204
TI-2024-01061 CVE-2024-1144 · GHSA-mwv8-7wjm-xvgf

Improper Access Control at Alma Devklan Blog

Priority LOW 29

Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00333 Published 2024-03-19 No fix listed CWE-284