Skip to content
OpenAdvisories

Vendor

pojoin

3 known vulnerabilities.

Products

h3blog 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-10485

    pojoin h3blog HTTP Header login ppt_log cross site scripting

    A vulnerability has been found in pojoin h3blog up to 5bf704425ebc11f4c24da51f32f36bb17ae20489. Affected by this issue is the function ppt_log of the file /login of the component HTTP Header Handler. Such manipulation of the argument X-Forwarded-For leads to …

    pojoin h3blog