CVE-2022-29020: Forestblog Project Forestblog

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.

Affected products

• Forestblog Project Forestblog: up to and including 2022-02-16

Published 2022-04-16. Last modified 2026-06-17.