Cnblogs vulnerabilities
We track 1 vulnerability in Cnblogs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 17, 2025.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Cnblogs vulnerabilities
- 7.1 High severity
Pdfpatcher: Improper Restriction of XML External Entity Reference
PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary