Description
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Blesta | Blesta | 3.0.0 – < 5.13.3 | 5.13.3 |
High · 7.2
CVE-2026-25615
EUVD-2026-5171GHSA-pg6q-9mqp-879x
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
Published Feb 3, 2026 · Updated Feb 5, 2026 · Assigned by mitre