high8.6
CVE-2025-36560
Server-side request forgery vulnerability exists in a-blog cms multiple versions.
Impact
Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attacker may gain access to sensitive information by sending a specially crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Appleple | A-Blog Cms | from 2.8.0 through 2.8.85 from 2.9.0 through 2.9.52 from 2.10.0 through 2.10.63 from 2.11.0 through 2.11.75 from 3.0.0 through 3.0.47 from 3.1.0 through 3.1.43 |