CVE-2025-13181 — pojoin h3blog add cross site scripting
A vulnerability was determined in pojoin h3blog 1.0. The affected element is an unknown function of the file /admin/cms/material/add. Executing a manipulation of the argument Na…
Published: 2025-11-14 · CVSS: 5.1 · CVSS 4.0
A vulnerability was determined in pojoin h3blog 1.0. The affected element is an unknown function of the file /admin/cms/material/add. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7