CVE-2024-25559

Name of the Vulnerable Software and Affected Versions a-blog cms versions 3.1.0 through 3.1.8

Description A URL spoofing issue exists, allowing an attacker to force the administrator to access an arbitrary website when clicking a link in the audit log by sending a specially crafted request.

Recommendations For versions 3.1.0 through 3.1.8, update to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.