Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-25614 2 Blesta, Phillipsdata 2 Blesta, Blesta 2026-02-13 7.5 High
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.
CVE-2026-25615 2 Blesta, Phillipsdata 2 Blesta, Blesta 2026-02-13 7.2 High
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
CVE-2024-25859 1 Phillipsdata 1 Blesta 2025-05-13 7.1 High
A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and execute arbitrary code.