Most recent entries from all

EUVD-2026-14132

fkie_cve-2022-24374

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. This vulnerability is different from CVE-2022-23916.

GHSA-g667-p784-m7j2

gsd-2022-24374

jvndb-2022-000014

a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. * Cross-site scripting (CWE-79) - CVE-2022-24374 * Cross-site scripting (CWE-79) - CVE-2022-23916 * Template injection (CWE-1336) - CVE-2022-23810 * Authentication bypass (CWE-291) - CVE-2022-21142 CVE-2022-24374 iwama yuu of Secure Sky Technology Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-23916 Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-23810, CVE-2022-21142 hibiki moriyama of STNet, Incorporated reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.