CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2025-2340 – otale Tale Blog Site Settings save saveOptions cross site scripting
https://notcve.org/view.php?id=CVE-2025-2340
16 Mar 2025 — A vulnerability was found in otale Tale Blog 2.0.5. It has been declared as problematic. This vulnerability affects the function saveOptions of the file /options/save of the component Site Settings. The manipulation of the argument Site Title leads to cross site scripting. The attack can be initiated remotely. • https://github.com/qkdjksfkeg/cve_article/blob/main/Tale/XSS.md • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 6.9EPSS: 0%CPEs: 1EXPL: 1CVE-2025-2339 – otale Tale Blog logs improper authentication
https://notcve.org/view.php?id=CVE-2025-2339
16 Mar 2025 — A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. • https://github.com/qkdjksfkeg/cve_article/blob/main/Tale/Unauthorized.md • CWE-287: Improper Authentication •