Medium severity4.8NVD Advisory· Published May 19, 2025· Updated Jun 17, 2026

CVE-2025-41429

Description

a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Appleple/A Blogcms
cpe:2.3:a:appleple:a-blog_cms:*:*:*:*:*:*:*:*
Range: >=2.8.0,<=2.8.85
A Blog/a-blogcmsllm-fuzzy
appleple inc./a-blog cmsv5
Range: Ver. 2.9.52 and earlier (Ver. 2.9.x series)

Patches

Vulnerability mechanics

References

developer.a-blogcms.jp/blog/news/JVNVU-90760614.htmlnvdVendor Advisory
jvn.jp/en/vu/JVNVU90760614/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000