Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.