<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: zhenfeng13</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-8740: A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0</title><link>https://patchthecve.com/cve/CVE-2025-8740.html</link><guid>https://patchthecve.com/cve/CVE-2025-8740.html</guid><pubDate>Wed, 17 Jun 2026 10:07:31 +0000</pubDate><description>LOW 2.4: A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to lau</description></item><item><title>CVE-2025-8739: A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2025-8739.html</link><guid>https://patchthecve.com/cve/CVE-2025-8739.html</guid><pubDate>Wed, 17 Jun 2026 10:07:31 +0000</pubDate><description>MEDIUM 4.3: A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been</description></item><item><title>CVE-2025-3808: A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2025-3808.html</link><guid>https://patchthecve.com/cve/CVE-2025-3808.html</guid><pubDate>Wed, 17 Jun 2026 09:20:42 +0000</pubDate><description>MEDIUM 4.3: A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints</description></item><item><title>CVE-2025-3807: A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0</title><link>https://patchthecve.com/cve/CVE-2025-3807.html</link><guid>https://patchthecve.com/cve/CVE-2025-3807.html</guid><pubDate>Wed, 17 Jun 2026 09:20:42 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects the function Upload of the file src/main/java/com/my/bbs/controller/common/UploadController.java of the component Endpoint. The manipulation leads to unrestricted upload. It is possible to initiate th</description></item><item><title>CVE-2025-3593: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0</title><link>https://patchthecve.com/cve/CVE-2025-3593.html</link><guid>https://patchthecve.com/cve/CVE-2025-3593.html</guid><pubDate>Wed, 17 Jun 2026 09:20:16 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. Th</description></item><item><title>CVE-2025-3592: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0</title><link>https://patchthecve.com/cve/CVE-2025-3592.html</link><guid>https://patchthecve.com/cve/CVE-2025-3592.html</guid><pubDate>Wed, 17 Jun 2026 09:20:15 +0000</pubDate><description>LOW 3.5: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/v1/link/edit. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed</description></item><item><title>CVE-2025-3591: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2025-3591.html</link><guid>https://patchthecve.com/cve/CVE-2025-3591.html</guid><pubDate>Wed, 17 Jun 2026 09:20:15 +0000</pubDate><description>LOW 3.5: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/v1/blog/edit. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been discl</description></item><item><title>CVE-2024-13145: A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0</title><link>https://patchthecve.com/cve/CVE-2024-13145.html</link><guid>https://patchthecve.com/cve/CVE-2024-13145.html</guid><pubDate>Wed, 17 Jun 2026 07:01:18 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack ca</description></item><item><title>CVE-2024-13144: A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0</title><link>https://patchthecve.com/cve/CVE-2024-13144.html</link><guid>https://patchthecve.com/cve/CVE-2024-13144.html</guid><pubDate>Wed, 17 Jun 2026 07:01:18 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. It is</description></item></channel></rss>