https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-12305.htmlhttps://patchthecve.com/cve/CVE-2025-12305.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 6.3: A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-5513.htmlhttps://patchthecve.com/cve/CVE-2025-5513.htmlWed, 17 Jun 2026 09:48:04 +0000LOW 3.5: A vulnerability has been found in quequnlong shiyi-blog up to 1.2.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/api/comment/add. The manipulation of the argument content leads to cross site scripting. The attack can be launched remothttps://patchthecve.com/cve/CVE-2025-5512.htmlhttps://patchthecve.com/cve/CVE-2025-5512.htmlWed, 17 Jun 2026 09:48:04 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file /api/sys/user/verifyPassword/ of the component Administrator Backend. The manipulation leads to improper authentication. It is possible to launch the attack https://patchthecve.com/cve/CVE-2025-5511.htmlhttps://patchthecve.com/cve/CVE-2025-5511.htmlWed, 17 Jun 2026 09:48:04 +0000MEDIUM 5.3: A vulnerability, which was classified as critical, has been found in quequnlong shiyi-blog up to 1.2.1. This issue affects some unknown processing of the file /dev api/app/album/photos/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2025-5510.htmlhttps://patchthecve.com/cve/CVE-2025-5510.htmlWed, 17 Jun 2026 09:48:03 +0000MEDIUM 6.3: A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-5509.htmlhttps://patchthecve.com/cve/CVE-2025-5509.htmlWed, 17 Jun 2026 09:48:03 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in quequnlong shiyi-blog up to 1.2.1. This affects an unknown part of the file /api/file/upload. The manipulation of the argument file/source leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed