VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2022-23916

CVE-2022-23916

Description

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. This vulnerability is different from CVE-2022-24374.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Appleple/A Blog CMS2 versions
    cpe:2.3:a:appleple:a-blog_cms:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:appleple:a-blog_cms:*:*:*:*:*:*:*:*range: >=2.8.0,<2.8.75
    • cpe:2.3:a:appleple:a-blog_cms:3.0.0:*:*:*:*:*:*:*
  • A Blog/a-blogcmsllm-fuzzy
    Range: <2.8.75, <2.9.40, <2.10.44, <2.11.42, <3.0.1
  • appleple inc./a-blog cmsv5
    Range: Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.