Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: quequnlong Component: Shiyi-blog Clear all filters
TI-2025-04953 CVE-2025-5513 · GHSA-c6r7-xfw8-p583

quequnlong shiyi-blog add cross site scripting

Priority MEDIUM 56

A vulnerability has been found in quequnlong shiyi-blog up to 1.2.1 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00376 Published 2025-06-03 No fix listed CWE-79
TI-2025-04951 CVE-2025-5511 · GHSA-mjq6-f642-426f

quequnlong shiyi-blog photos improper authorization

Priority HIGH 70

A vulnerability, which was classified as critical, has been found in quequnlong shiyi-blog up to 1.2.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00803 Published 2025-06-03 No fix listed CWE-266
TI-2025-04949 CVE-2025-5509 · GHSA-fpff-3qmf-f6fg

quequnlong shiyi-blog upload path traversal

Priority MEDIUM 57

A vulnerability classified as critical has been found in quequnlong shiyi-blog up to 1.2.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00768 Published 2025-06-03 No fix listed CWE-22