CVE-2020-18268: Zblogcn Z-Blogphp

Medium severity, CVSS 6.1. EPSS: 2.7% chance of exploitation in the next 30 days.

Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php."

Affected products

• Zblogcn Z-Blogphp: up to and including 1.5.2

Published 2021-06-07. Last modified 2026-06-17.