CVE-2018-10255: Clustercoding Blog Master Pro

High severity, CVSS 8.8. EPSS: 6.9% chance of exploitation in the next 30 days.

A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.

Affected products

Published 2018-05-01. Last modified 2026-06-17.