# cve.now: Appleple Inc.

The newest entries naming Appleple Inc. as an affected vendor (up to 200), of 25 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-87727](https://cve.now/CVE-2026-87727.md): a-blog cms Ver. (CVSS 6.5)
- [CVE-2025-27566](https://cve.now/CVE-2025-27566.md): Path traversal vulnerability exists in a-blog cms versions prior to Ver. (CVSS 3.8)
- [CVE-2025-32999](https://cve.now/CVE-2025-32999.md): Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver. (CVSS 5.4)
- [CVE-2025-36560](https://cve.now/CVE-2025-36560.md): Server-side request forgery vulnerability exists in a-blog cms multiple versions. (CVSS 8.6)
- [CVE-2025-41429](https://cve.now/CVE-2025-41429.md): a-blog cms multiple versions neutralize logs improperly. (CVSS 4.8)
- [CVE-2025-31103](https://cve.now/CVE-2025-31103.md): Untrusted data deserialization vulnerability exists in a-blog cms. (CVSS 7.5)
- [CVE-2024-31396](https://cve.now/CVE-2024-31396.md): Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3 (CVSS 6.6)
- [CVE-2024-31395](https://cve.now/CVE-2024-31395.md): Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ve (CVSS 6.1)
- [CVE-2024-31394](https://cve.now/CVE-2024-31394.md): Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver (CVSS 6.5)
- [CVE-2024-30420](https://cve.now/CVE-2024-30420.md): Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series ver (CVSS 4.4)
- [CVE-2024-30419](https://cve.now/CVE-2024-30419.md): Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ve (CVSS 5.4)
- [CVE-2024-27279](https://cve.now/CVE-2024-27279.md): Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver. (CVSS 6.5)
- [CVE-2024-25559](https://cve.now/CVE-2024-25559.md): URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. (CVSS 4.7)
- [CVE-2024-23782](https://cve.now/CVE-2024-23782.md): Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver (CVSS 5.4)
- [CVE-2024-23348](https://cve.now/CVE-2024-23348.md): Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3 (CVSS 8.8)
- [CVE-2024-23183](https://cve.now/CVE-2024-23183.md): Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29 (CVSS 5.4)
- [CVE-2024-23182](https://cve.now/CVE-2024-23182.md): Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0 (CVSS 8.1)
- [CVE-2024-23181](https://cve.now/CVE-2024-23181.md): Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29 (CVSS 6.1)
- [CVE-2024-23180](https://cve.now/CVE-2024-23180.md): Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3 (CVSS 8.8)
- [CVE-2022-24374](https://cve.now/CVE-2022-24374.md): Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.4 (no CVSS)
- [CVE-2022-23916](https://cve.now/CVE-2022-23916.md): Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.4 (no CVSS)
- [CVE-2022-23810](https://cve.now/CVE-2022-23810.md): Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series vers (no CVSS)
- [CVE-2022-21142](https://cve.now/CVE-2022-21142.md): Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9. (no CVSS)
- [CVE-2019-6034](https://cve.now/CVE-2019-6034.md): a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be exe (no CVSS)
- [CVE-2019-6033](https://cve.now/CVE-2019-6033.md): Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8 (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/appleple
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.