TI-2025-35158 CVE-2025-55737
flaskBlog arbitrary comment delete
Priority HIGH 70
flaskBlog is a blog app built with Flask.
Vulnerabilities
10 records
TI-2025-35157 CVE-2025-55736
flaskBlog allows arbitrary privilege escalation
Priority HIGH 79
flaskBlog is a blog app built with Flask.
TI-2025-35156 CVE-2025-55735
flaskBlog Stored XSS Vulnerability
Priority MEDIUM 57
flaskBlog is a blog app built with Flask.
TI-2025-35155 CVE-2025-55734
flaskBlo Authorization Bypass
Priority HIGH 70
flaskBlog is a blog app built with Flask.
TI-2025-33558 CVE-2025-53631
flaskBlog XSS Vulnerability in postContent
Priority MEDIUM 57
flaskBlog is a blog app built with Flask.
TI-2025-20720 CVE-2025-28104 · GHSA-rfhg-52gw-r6hv
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.
Priority HIGH 72
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.
TI-2025-20719 CVE-2025-28103 · GHSA-87v4-c5h4-88xg
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.
Priority LOW 28
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.
TI-2025-20718 CVE-2025-28102 · GHSA-743f-hxpg-f2rj
A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to…
Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the postContent parameter at /createpost.
TI-2025-20717 CVE-2025-28101 · GHSA-mrgc-7pv6-7gc9
An arbitrary file deletion vulnerability in the /post/{postTitle} component of flaskBlog…
Priority HIGH 68
An arbitrary file deletion vulnerability in the /post/{postTitle} component of flaskBlog v2.6.1 allows attackers to delete article titles created by other users via supplying a crafted POST request.
Priority MEDIUM 62
flaskBlog is a simple blog app built with Flask.