CVE-2026-124636 | kevquirk PureBlog up to 3.7.2 Page Editor includes/lib/content.php save_page page slug path traversal (Issue 87)

A vulnerability has been found in kevquirk PureBlog up to 3.7.2 and classified as problematic. The affected element is the function save_page of the file includes/lib/content.php of the component Page Editor. Performing a manipulation of the argument page slug results in path traversal.

This vulnerability is known as CVE-2026-124636. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More