Vendors · phillipsdata
Products (1)
Recent Vulnerabilities
View all 4 →CVE-2026-25616MEDIUM 4.7
Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.
CVE-2026-25615HIGH 7.2
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
CVE-2026-25614HIGH 7.5
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.
CVE-2024-25859HIGH 7.1
A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and execute arbitrary code.
