Oneblog Project Oneblog
2 CVEs affecting Oneblog Project Oneblog. Latest disclosed: 2022-01-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-46085 | Medium | 6.5 | 2022-01-25 | OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority. |
CVE-2021-46025 | Medium | 5.4 | 2022-01-19 | A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8. via the add function in the operation tab list in the background. |