Skip to content
OpenAdvisories
Unscored CVE-2019-6034 EUVD-2019-15602GHSA-m66p-hgxv-mh75

a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be ex…

Published Dec 26, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.

Affected products

VendorProductAffectedFixed
appleple a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) —

References