Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the logged-in user's web browser.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
a-blog cms Ver.3.1.x series
Vendor
appleple inc.
Product
a-blog cms Ver.3.1.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.3.1.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.3.1.7
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.3.0.x series
Vendor
appleple inc.
Product
a-blog cms Ver.3.0.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.3.0.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.3.0.29
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.2.11.x series
Vendor
appleple inc.
Product
a-blog cms Ver.2.11.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.2.11.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.2.11.58
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.2.10.x series
Vendor
appleple inc.
Product
a-blog cms Ver.2.10.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.2.10.x series · Scoped product and version facts