Cells Blog vulnerabilities

• cells blog Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter. CVE-2017-17950 8.8 HighDecember 28, 2017
• cells blog Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter. CVE-2017-17949 6.1 MediumDecember 28, 2017
• cells blog Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request. CVE-2017-17948 6.1 MediumDecember 28, 2017