Forestblog Project

8 CVEs across 1 Forestblog Project products. Browse Forestblog Project vulnerabilities, severities, and proof-of-concept exploits.

Forestblog Project products with known CVEs

ProductCVEs
Forestblog8
Forestblog Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-3005Low3.52025-03-31A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this issue is some unknown functionality of the compon…
CVE-2025-3004Low3.52025-03-31A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of…
CVE-2024-57498Medium4.82025-02-03Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function.
CVE-2023-6887Medium6.32023-12-17A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the co…
CVE-2022-29020Medium6.12022-04-16ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.
CVE-2021-46034Medium6.12022-01-25A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box.
CVE-2021-46033Critical9.82022-01-25In ForestBlog, as of 2021-12-28, File upload can bypass verification.
CVE-2020-18964High8.82021-05-11Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain pri…