CVE-2025-13182

MEDIO 4.8CVE-2025-13182 · Published 14/11/2025 · updated 07/10/2026

In breve

CVE-2025-13182 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda h3blog (h3blog).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.28%, superiore al 20.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
h3blog h3blog	`= 1.0.0`	No fix yet

Description

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.

References

caigo8/CVE-md · Exploit
caigo8/CVE-md · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Altre vulnerabilità di h3blog

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free