Skip to content
OpenAdvisories

Vendor

Devklan

3 known vulnerabilities.

Products

Alma Blog 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.8
    CVE-2024-1146

    Cross-site Scripting at Alma Devklan Blog

    Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or '…

    Devklan Alma Blog
  • Medium 5.3
    CVE-2024-1145

    Observable Response Discrepancy at Alma Devklan Blog

    User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow a remote user to retrieve all valid users registered in the application just by looking at the request response.

    Devklan Alma Blog
  • Medium 6.5
    CVE-2024-1144

    Improper Access Control at Alma Devklan Blog

    Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.

    Devklan Alma Blog