Vulnerability Description
A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zhenfeng13 | My-Blog | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/ZHENFENG13/My-Blog/issues/146ExploitIssue TrackingThird Party Advisory
- https://github.com/ZHENFENG13/My-Blog/issues/146#issue-3265304545ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.319236Permissions RequiredVDB Entry
- https://vuldb.com/?id.319236Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.623480Third Party AdvisoryVDB Entry
- https://github.com/ZHENFENG13/My-Blog/issues/146ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2025-8740?
CVE-2025-8740 is a vulnerability with a CVSS score of 2.4 (LOW). A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler...
How severe is CVE-2025-8740?
CVE-2025-8740 has been rated LOW with a CVSS base score of 2.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-8740?
Check the references section above for vendor advisories and patch information. Affected products include: Zhenfeng13 My-Blog.