CVE-2024-57498: Forestblog Project Forestblog

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function.

Affected products

• Forestblog Project Forestblog: version 2024-12-23 only

Published 2025-02-03. Last modified 2026-06-17.