CVE-2025-3004

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

Vendor	Product	Versions
Sayski	ForestBlog	20250321

References

https://github.com/saysky/ForestBlog/issues/104Exploit, Issue Tracking, Vendor Advisory
https://github.com/saysky/ForestBlog/issues/104#issue-2937118096Exploit, Issue Tracking, Vendor Advisory
https://vuldb.com/?ctiid.302053Permissions Required, VDB Entry
https://vuldb.com/?id.302053Third Party Advisory, VDB Entry
https://vuldb.com/?submit.524484Third Party Advisory, VDB Entry
https://github.com/saysky/ForestBlog/issues/104Exploit, Issue Tracking, Vendor Advisory
https://github.com/saysky/ForestBlog/issues/104#issue-2937118096Exploit, Issue Tracking, Vendor Advisory

Timeline

Published: Mar 31, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-300409.0The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.pr CVE-2025-300419.0The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogs CVE-2025-300427.8The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reali CVE-2025-300437.1CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without aut CVE-2025-300449.4In the endpoints "/cgi-bin/CliniNET.prd/utils/usrlogstat_simple.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", "/cgi-bin/CliniNET.prd/uti CVE-2025-300458.6CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document content. Due to im CVE-2025-300469.0In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges CVE-2025-300479.4CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used CVE-2025-300485.3The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.CVE-2025-300498.2The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3 CVE-2025-30055.4A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this issue is some unknown function CVE-2025-300509.4CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter