CVE-2026-25616 Scanner
CVE-2026-25616 Scanner - Cross-Site Scripting vulnerability in Blesta
Used 2k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-25616
6.1
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
blesta
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: blesta
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →