CVE-2025-29461: Appleple A-Blogcms

High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path.

Affected products

• Appleple A-Blogcms: version 3.1.15 only

Published 2025-04-17. Last modified 2026-06-17.