Advisories · Technology
zhenfeng13 My-Blog.
Every CVE that names zhenfeng13 My-Blog among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
zhenfeng13 My-Blog Tag save cross site scripting
- zhenfeng13 My-Blog
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.9 Medium
zhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replay
- zhenfeng13 My-Blog
- Authentication bypass
- CVSS 4.8 Medium
zhenfeng13 My-Blog Category save cross site scripting
- zhenfeng13 My-Blog
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
zhenfeng13 My-Blog save cross-site request forgery
- zhenfeng13 My-Blog
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 5.3 Medium
zhenfeng13 My-Blog uploadController. java upload unrestricted upload
- zhenfeng13 My-Blog
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload
- zhenfeng13 My-Blog
- Broken access control
- Unrestricted file upload
- CVSS 4.3 Medium
zhenfeng13 My-Blog userInfo cross-site request forgery
- zhenfeng13 My-Blog
- Cross-site request forgery (CSRF)