Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary JavaScript code by uploading a specially crafted SVG file.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
a-blog cms Ver.3.1.x series
Vendor
appleple inc.
Product
a-blog cms Ver.3.1.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.3.1.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.3.1.7
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.3.0.x series
Vendor
appleple inc.
Product
a-blog cms Ver.3.0.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.3.0.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.3.0.29
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.2.11.x series
Vendor
appleple inc.
Product
a-blog cms Ver.2.11.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.2.11.x series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.2.11.58
affected
Unavailable
Unavailable
Unavailable
None listed
a-blog cms Ver.2.10.x series
Vendor
appleple inc.
Product
a-blog cms Ver.2.10.x series
Platforms
Unknown
Default status
Unknown
a-blog cms Ver.2.10.x series · Scoped product and version facts