Vendor/product archive

alma / alma_blog CVEs

Beta · best-effort

3 CVEs tagged to alma / alma_blog — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to alma vendor archive

CVE-2024-1146

Published Mar 19, 2024

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payl…

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-1145

Published Mar 19, 2024

User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow a remote user to retrieve all valid users registered…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-1144

Published Mar 19, 2024

Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the applica…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1