Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: zhenfeng13 Component: My Blog Clear all filters
TI-2023-13955 CVE-2023-29639 · GHSA-22hr-pvw9-gcpj

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to…

Priority MEDIUM 58

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyB…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00364 Published 2023-05-01 No fix listed CWE-79
TI-2023-13952 CVE-2023-29636 · GHSA-w96p-mhjx-9hhq

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to…

Priority MEDIUM 58

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" field in the "blog management" page due to the the default configuration not using M…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00414 Published 2023-05-01 No fix listed CWE-79