Skip to content
Zhyd Oneblog vulnerabilities
-
zhyd oneblog
zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via...
CVE-2025-60355
9.8 Critical
-
zhyd oneblog
The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability.
CVE-2025-56264
7.5 High
-
zhangyd-c oneblog
zhangyd-c OneBlog RestApiController.java autoLink server-side request forgery
CVE-2025-2835
5.3 Medium
-
zhangyd-c oneblog
zhangyd-c OneBlog HTTP Header redos
CVE-2025-2833
6.9 Medium
-
zhyd oneblog
OneBlog v2.3.6 was discovered to contain a template injection vulnerability via the template...
CVE-2024-54954
8.0 High
-
zhyd oneblog
OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...
CVE-2024-29474
5.4 Medium
-
zhyd oneblog
OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...
CVE-2024-29473
6.1 Medium
-
zhyd oneblog
OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...
CVE-2024-29472
5.4 Medium
-
zhyd oneblog
OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...
CVE-2024-29471
5.4 Medium
-
zhyd oneblog
OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...
CVE-2024-29470
6.1 Medium
-
oneblog project oneblog
A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute...
CVE-2024-29469
6.1 Medium
-
zhyd oneblog
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via...
CVE-2022-34013
4.3 Medium
-
zhyd oneblog
Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of...
CVE-2022-34012
6.5 Medium
-
zhyd oneblog
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via...
CVE-2022-34011
4.3 Medium