CVE-2025-13182 — pojoin h3blog addtitle cross site scripting
A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title…
Published: 2025-11-14 · CVSS: 5.1 · CVSS 4.0
A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7