CVE-2025-27566 – a-blog CMS Path Traversal Vulnerability

CVE ID : CVE-2025-27566

Published : May 19, 2025, 9:15 a.m. | 1 hour, 52 minutes ago

Description : Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege. If this vulnerability is exploited, a remote authenticated attacker with the administrator privilege may obtain or delete any file on the server.

Severity: 3.8 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…