Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2024-1144

Improper Access Control at Alma Devklan Blog

Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an unauthenticated user to access the application's functionalities without the need for credentials.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Alma Devklan
Products
Alma Blog Alma Blog
CVE-2024-1145

Observable Response Discrepancy at Alma Devklan Blog

User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow a remote user to retrieve all valid users registered in the application just by looking at the request response.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Alma Devklan
Products
Alma Blog Alma Blog
CVE-2024-1146

Cross-site Scripting at Alma Devklan Blog

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Alma Devklan
Products
Alma Blog Alma Blog