Blog-ssm Project Blog-ssm — known CVE vulnerabilities

Every CVE whose affected-product data names Blog-ssm Project Blog-ssm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-40035 — CVSS 8.8 (high): File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via…
• CVE-2022-40036 — CVSS 6.5 (medium): An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via…