Vulnerabilities > Appleple > A Blog CMS > 2.8.53

DATE CVE VULNERABILITY TITLE RISK
2019-12-26 CVE-2019-6034 Injection vulnerability in Appleple A-Blog CMS
a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.
network
low complexity
appleple CWE-74
6.1
6.1
2019-12-26 CVE-2019-6033 Cross-site Scripting vulnerability in Appleple A-Blog CMS
Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
appleple CWE-79
6.1
6.1