https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8740.htmlhttps://patchthecve.com/cve/CVE-2025-8740.htmlWed, 17 Jun 2026 10:07:31 +0000LOW 2.4: A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to lauhttps://patchthecve.com/cve/CVE-2025-8739.htmlhttps://patchthecve.com/cve/CVE-2025-8739.htmlWed, 17 Jun 2026 10:07:31 +0000MEDIUM 4.3: A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2024-13145.htmlhttps://patchthecve.com/cve/CVE-2024-13145.htmlWed, 17 Jun 2026 07:01:18 +0000MEDIUM 6.3: A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack cahttps://patchthecve.com/cve/CVE-2024-13144.htmlhttps://patchthecve.com/cve/CVE-2024-13144.htmlWed, 17 Jun 2026 07:01:18 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. It is