medium4.8
CVE-2025-41429
a-blog cms multiple versions neutralize logs improperly.
Impact
a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Appleple | A-Blog Cms | from 2.8.0 through 2.8.85 from 2.9.0 through 2.9.52 from 2.10.0 through 2.10.63 from 2.11.0 through 2.11.75 from 3.0.0 through 3.0.47 from 3.1.0 through 3.1.43 |