Vulnerabilities > Zblogcn > Z Blogphp > 1.6.1.2100
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-07-08 | CVE-2024-39203 | Cross-site Scripting vulnerability in Zblogcn Z-Blogphp A cross-site scripting (XSS) vulnerability in the Backend Theme Management module of Z-BlogPHP v1.7.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | 6.1 |
| 2022-09-20 | CVE-2022-40357 | Server-Side Request Forgery (SSRF) vulnerability in Zblogcn Z-Blogphp A security issue was discovered in Z-BlogPHP <= 1.7.2. | 9.8 |
| 2021-12-02 | CVE-2020-29176 | Unrestricted Upload of File with Dangerous Type vulnerability in Zblogcn Z-Blogphp 1.6.1.2100 An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file. | 7.8 |
| 2021-12-02 | CVE-2020-29177 | Unspecified vulnerability in Zblogcn Z-Blogphp 1.6.1.2100 Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php. | 9.1 |