| Package | Affected versions | Patched versions |
|---|---|---|
| a-blog cms | ≥ 2.10.0, ≤ 2.10.63≥ 2.11.0, ≤ 2.11.75≥ 2.8.0, ≤ 2.8.85≥ 2.9.0, ≤ 2.9.52≥ 3.0.0, ≤ 3.0.47≥ 3.1.0, ≤ 3.1.43 |
a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free