Vulnerabilities (CVE)

Filtered by vendor Blog-ssm Project Subscribe
Filtered by product Blog-ssm
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-40036 1 Blog-ssm Project 1 Blog-ssm 2023-08-08 N/A 6.5 MEDIUM
An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserList component.