Forestblog Project Forestblog
8 CVEs affecting Forestblog Project Forestblog. Latest disclosed: 2025-03-31. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-46033 | Critical | 9.8 | 2022-01-25 | In ForestBlog, as of 2021-12-28, File upload can bypass verification. |
CVE-2020-18964 | High | 8.8 | 2021-05-11 | Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain pri… |
CVE-2023-6887 | Medium | 6.3 | 2023-12-17 | A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the co… |
CVE-2022-29020 | Medium | 6.1 | 2022-04-16 | ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar. |
CVE-2021-46034 | Medium | 6.1 | 2022-01-25 | A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box. |
CVE-2024-57498 | Medium | 4.8 | 2025-02-03 | Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function. |
CVE-2025-3005 | Low | 3.5 | 2025-03-31 | A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this issue is some unknown functionality of the compon… |
CVE-2025-3004 | Low | 3.5 | 2025-03-31 | A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |