Advisories · Technology

DogukanUrker FlaskBlog.

Every CVE that names DogukanUrker FlaskBlog among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-55737 CVE record

CVSS 6.9 Medium

flaskBlog arbitrary comment delete
- DogukanUrker FlaskBlog
- Broken access control
Not analysed yet 19 Aug 2025
CVE-2025-55736 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

flaskBlog allows arbitrary privilege escalation
- DogukanUrker FlaskBlog
- Broken access control
- CWE-807
Not analysed yet 19 Aug 2025
CVE-2025-55735 CVE record

CVSS 5.3 Medium

flaskBlog Stored XSS Vulnerability
- DogukanUrker FlaskBlog
- Cross-site scripting (XSS)
- CWE-807
Not analysed yet 19 Aug 2025
CVE-2025-55734 CVE record

CVSS 6.9 Medium

flaskBlo Authorization Bypass
- DogukanUrker FlaskBlog
- Broken access control
Not analysed yet 19 Aug 2025
CVE-2025-53631 CVE record

CVSS 5.3 Medium

flaskBlog XSS Vulnerability in postContent
- DogukanUrker flaskBlog
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2024-22414 CVE record

CVSS 6.5 Medium

User profile page vulnerable to Cross Site Scripting (XSS) in flaskBlog
- DogukanUrker flaskBlog
- Cross-site scripting (XSS)
Not analysed yet 17 Jan 2024