CVE-2025-32999 - CVE House
Back to Database
Status published Medium CVE-2025-32999

Cross-site scripting vulnerability exists in a-blog cms versions prior to...

Vulnerability Description

Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and prior to Ver. 3.0.47. This issue exists in a specific field in the entry editing screen, and exploitation requires contributor or higher level privileges. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-32999

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

appleple inc.

View all reports →

Affected Software

a-blog cms
Vulnerable Versions:
prior to Ver. 3.1.43 (Ver. 3.1.x series), prior to Ver. 3.0.47 (Ver. 3.0.x series)

Timeline

Official Publish: May 19th, 2025
Last Modified: May 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)