CVE Intelligence

Phillipsdata Blesta vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Phillipsdata Blesta: 3 record(s), with affected versions and fixes.
cpe:2.3:a:phillipsdata:blesta

CVE-2026-25616 Medium · 6.1 Public exploit CWE-79 Feb 3, 2026
Cross-site Scripting (XSS) in Phillipsdata Blesta
Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.
CVE-2026-25615 High · 7.2 CWE-502 Feb 3, 2026
Deserialization of Untrusted Data in Phillipsdata Blesta
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
CVE-2026-25614 High · 7.5 CWE-502 Feb 3, 2026
Deserialization of Untrusted Data in Phillipsdata Blesta
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.