Description
a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| appleple | a-blog cms | Ver. 2.8.85 and earlier (Ver. 2.8.x series), Ver. 3.1.43 and earlier (Ver. 3.1.x series), Ver. 3.0.47 and earlier (Ver. 3.0.x series), Ver. 2.11.75 and earlier (Ver. 2.11.x series), Ver. 2.10.63 and earlier (Ver. 2.10.x series), Ver. 2.9.52 and earlier (Ver. 2.9.x series) | — |