Filtered by vendor Oneblog Project Subscriptions
Filtered by product Oneblog Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-46085 1 Oneblog Project 1 Oneblog 2024-08-04 6.5 Medium
OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority.
CVE-2021-46025 1 Oneblog Project 1 Oneblog 2024-08-04 5.4 Medium
A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8. via the add function in the operation tab list in the background.