CVE-2018-10680

Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings --> Basic setting --> Website title" and enters an XSS payload via the zb_system/cmd.php ZC_BLOG_NAME parameter. NOTE: the vendor disputes the security relevance, noting it is "just a functional bug.

• CWE-79

• https://github.com/zblogcn/zblogphp/issues/185Exploit, Third Party Advisory
• https://github.com/zblogcn/zblogphp/issues/205Third Party Advisory
• https://github.com/zblogcn/zblogphp/issues/185Exploit, Third Party Advisory
• https://github.com/zblogcn/zblogphp/issues/205Third Party Advisory

Published

May 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1067In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found…6.1
• CVE-2018-10675The do_get_mempolicy function in mm/mempolicy.c in the Linux…7.8
• CVE-2018-10676CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Visi…
• CVE-2018-10677The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0…
• CVE-2018-10678MyBB 1.8.15, when accessed with Microsoft Edge, mishandles '…
• CVE-2018-1068A flaw was found in the Linux 4.x kernel's implementation of…6.7
• CVE-2018-10682An issue was discovered in WildFly 10.1.2.Final. It is possi…9.8
• CVE-2018-10683An issue was discovered in WildFly 10.1.2.Final. In the case…9.8
• CVE-2018-10685In Long Range Zip (aka lrzip) 0.631, there is a use-after-fr…
• CVE-2018-10686An issue was discovered in Vesta Control Panel 0.9.8-20. The…
• CVE-2018-10689blktrace (aka Block IO Tracing) 1.2.0, as used with the Linu…
• CVE-2018-1069Red Hat OpenShift Enterprise version 3.7 is vulnerable to ac…