Approved changes feed: RSS · Atom
cpe:2.3:a:pojoin:h3blog:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pojoin (9b25b15f-6a0e-5331-961e-90bde12b39b1) |
|---|---|
| Product | H3Blog (5e23bc13-c441-55be-b8f7-af035bf9bd60) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-10485 |
vulnerable | 2026-06-08 07:02:26.947599 |
pojoin h3blog HTTP Header login ppt_log cross site scripting
MEDIUM (4.3)
A vulnerability has been found in pojoin h3blog up to 5bf704425ebc11f4c24da51f32f36bb17ae20489. Affected by this issue is the function ppt_log of the file /login of the component HTTP Header Handler. Such manipulation of the argument X-Forwarded-For leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.
Published: 2025-09-15T22:32:09.930Z
Updated: 2025-09-16T13:45:59.226Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.