H3blog vulnerabilities
Published CVEs affecting H3blog products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-13182
Medium · 4.8
CWE-79 Nov 14, 2025
pojoin h3blog addtitle cross site scripting
A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.
CVE-2025-13181
Medium · 4.8
CWE-79 Nov 14, 2025
pojoin h3blog add cross site scripting
A vulnerability was determined in pojoin h3blog 1.0. The affected element is an unknown function of the file /admin/cms/material/add. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.