a-blog cms 多漏洞通报: SSRF/路径遍历/XSS (CVE-2025-27566等)
Security Advisory
JVNVU#90760614
High
appleple inc.
Affected:
- a-blog cms versions prior to Ver. 3.1.43
- a-blog cms versions prior to Ver. 3.0.47
- a-blog cms versions prior to Ver. 2.11.75
- a-blog cms versions prior to Ver. 2.10.63
- a-blog cms versions prior to Ver. 2.9.52
Referenced CVEs:
CVE-2025-27566 · 3.8
CVE-2025-32999 · 5.4
CVE-2025-36560 · 8.6
CVE-2025-41429 · 4.8
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档