Advisories · Technology

appleple inc. a-blog cms (Ver.3.0.x series).

Every CVE that names appleple inc. a-blog cms (Ver.3.0.x series) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-31103 CVE record

CVSS 7.5 High

Deserialization of untrusted data in appleple inc. a-blog cms (Ver.3.1.x series) and others
- appleple inc. a-blog cms (Ver.3.1.x series)
- appleple inc. a-blog cms (Ver.3.0.x series)
- Insecure deserialization
Not analysed yet 31 Mar 2025
CVE-2024-31396 CVE record

CVSS 6.6 Medium

Code injection in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Code injection
Not analysed yet 22 May 2024
CVE-2024-31395 CVE record

CVSS 6.1 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 22 May 2024
CVE-2024-31394 CVE record

CVSS 6.5 Medium

Path traversal in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Path traversal
Not analysed yet 22 May 2024
CVE-2024-30420 CVE record

CVSS 4.4 Medium

Server-side request forgery in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Server-side request forgery (SSRF)
Not analysed yet 22 May 2024
CVE-2024-30419 CVE record

CVSS 5.4 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 22 May 2024
CVE-2024-27279 CVE record

CVSS 6.5 Medium

Path traversal in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Path traversal
Not analysed yet 12 Mar 2024
CVE-2024-23782 CVE record

CVSS 5.4 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 28 Jan 2024
CVE-2024-23348 CVE record

CVSS 8.8 High

appleple inc. a-blog cms Ver.3.1.x series: Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to…
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
Not analysed yet 23 Jan 2024
CVE-2024-23183 CVE record

CVSS 5.4 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 23 Jan 2024
CVE-2024-23182 CVE record

CVSS 8.1 High

Path traversal in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Path traversal
Not analysed yet 23 Jan 2024
CVE-2024-23181 CVE record

CVSS 6.1 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 23 Jan 2024
CVE-2024-23180 CVE record

CVSS 8.8 High

Unrestricted file upload in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Unrestricted file upload
Not analysed yet 23 Jan 2024