Advisories · Technology

appleple inc. a-blog cms.

Every CVE that names appleple inc. a-blog cms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87727 CVE record

CVSS 6.9 Medium

Path traversal in appleple inc. a-blog cms
- appleple inc. a-blog cms
- Path traversal
Not analysed yet 11 Sept 2026
CVE-2025-27566 CVE record

CVSS 5.1 Medium

Path traversal in appleple inc. a-blog cms
- appleple inc. a-blog cms
- Path traversal
Not analysed yet 19 May 2025
CVE-2025-32999 CVE record

CVSS 4.8 Medium

Cross-site scripting in appleple inc. a-blog cms
- appleple inc. a-blog cms
- Cross-site scripting (XSS)
Not analysed yet 19 May 2025
CVE-2025-36560 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Server-side request forgery in appleple inc. a-blog cms
- appleple inc. a-blog cms
- Server-side request forgery (SSRF)
Not analysed yet 19 May 2025
CVE-2025-41429 CVE record

CVSS 2.1 Low

Log injection in appleple inc. a-blog cms
- appleple inc. a-blog cms
- Other injection
Not analysed yet 19 May 2025
CVE-2024-31395 CVE record

CVSS 6.1 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 22 May 2024
CVE-2024-31394 CVE record

CVSS 6.5 Medium

Path traversal in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Path traversal
Not analysed yet 22 May 2024
CVE-2024-30419 CVE record

CVSS 5.4 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 22 May 2024
CVE-2024-27279 CVE record

CVSS 6.5 Medium

Path traversal in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Path traversal
Not analysed yet 12 Mar 2024
CVE-2024-25559 CVE record

CVSS 4.7 Medium

Open redirect in appleple inc. a-blog cms
- appleple inc. a-blog cms
- Open redirect
Not analysed yet 15 Feb 2024
CVE-2024-23782 CVE record

CVSS 5.4 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 28 Jan 2024
CVE-2024-23348 CVE record

CVSS 8.8 High

appleple inc. a-blog cms Ver.3.1.x series: Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to…
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
Not analysed yet 23 Jan 2024
CVE-2024-23183 CVE record

CVSS 5.4 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 23 Jan 2024
CVE-2024-23182 CVE record

CVSS 8.1 High

Path traversal in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Path traversal
Not analysed yet 23 Jan 2024
CVE-2024-23181 CVE record

CVSS 6.1 Medium

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Cross-site scripting (XSS)
Not analysed yet 23 Jan 2024
CVE-2024-23180 CVE record

CVSS 8.8 High

Unrestricted file upload in appleple inc. a-blog cms Ver.3.1.x series and others
- appleple inc. a-blog cms Ver.3.1.x series
- appleple inc. a-blog cms Ver.3.0.x series
- Unrestricted file upload
Not analysed yet 23 Jan 2024
CVE-2022-24374 CVE record

appleple inc. a-blog cms: Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to…
- appleple inc. a-blog cms
Not analysed yet 24 Feb 2022
CVE-2022-23916 CVE record

appleple inc. a-blog cms: Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to…
- appleple inc. a-blog cms
Not analysed yet 24 Feb 2022
CVE-2022-23810 CVE record

appleple inc. a-blog cms: Template injection (Improper Neutralization of Special Elements Used in a Template…
- appleple inc. a-blog cms
Not analysed yet 24 Feb 2022
CVE-2022-21142 CVE record

appleple inc. a-blog cms: Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to…
- appleple inc. a-blog cms
Not analysed yet 24 Feb 2022
CVE-2019-6034 CVE record

appleple inc. a-blog cms: a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x)…
- appleple inc. a-blog cms
Not analysed yet 26 Dec 2019
CVE-2019-6033 CVE record

appleple inc. a-blog cms: Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23…
- appleple inc. a-blog cms
Not analysed yet 26 Dec 2019