medium4.8
CVE-2018-9169
Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter.
Impact
Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter. The component must be accessed directly by an administrator, or through CSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zblogcn | Z-Blogphp | Version 1.5.1 |