TI-2026-20723 CVE-2026-25616 · GHSA-3q94-vm9h-5h6v
Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.
Priority LOW 28
Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.
Vulnerabilities
4 records
TI-2026-20722 CVE-2026-25615 · GHSA-pg6q-9mqp-879x
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
Priority LOW 34
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
TI-2026-20721 CVE-2026-25614 · GHSA-h48q-qvjq-c932
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.
Priority LOW 35
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.
TI-2024-16981 CVE-2024-25859 · GHSA-xpc2-r64x-8hr9
A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2…
Priority HIGH 66
A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and execute arbitrary code.