CNNVD-202508-1996 Information
CNNVD ID
CNNVD-202508-1996
Related CVE
- CNNVD Published: 2025-08-18
Description (Chinese)
My-Blog是ZHENFENG13个人开发者的由 SpringBoot + Mybatis + Thymeleaf 等技术实现的 Java 博客系统，页面美观、功能齐全、部署简单及完善的代码。 My-Blog 1.0.0及之前版本存在安全漏洞，该漏洞源于Tag Handler组件对用户输入过滤不足，导致可被远程触发的跨站脚本攻击。
Description (English)
My-Blog is a Java blog system implemented by ZHENFENG13 individual developers, such as SpringBoot + Mybatis + Thymeleaf, which looks at the page, is fully functional, and deploys simple and perfect codes. My-Blog 1.0.0 and previous versions had a security loophole, which stemmed from the inadequate filtering of the Tag Handler component for user input, resulting in a remotely triggered cross-site script attack.
Hazard Level
Critical
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-08-18
Last Modified
2026-02-24
References
https://github.com/ZHENFENG13/My-Blog/issues/147#issue-3265306297 https://vuldb.com/?ctiid.320423 https://vuldb.com/?submit.628095 https://vuldb.com/?id.320423 https://nvd.nist.gov/vuln/detail/CVE-2025-9101
Share on: