CVE-2016-1179: Appleple A-Blog CMS

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML.

Affected products

• Appleple A-Blog CMS: up to and including 2.6.0.1

Published 2017-04-12. Last modified 2026-06-17.