CNNVD-202508-3143 Information

CNNVD ID

CNNVD-202508-3143

CVE-2025-9432

  • CNNVD Published: 2025-08-26

Description (Chinese)

mblog是langhsu个人开发者的一个博客系统。 mblog 3.5.0及之前版本存在安全漏洞,该漏洞源于对文件/admin/post/list中参数Title的错误操作导致跨站脚本攻击。

Description (English)

Mblog is a blog system for the langhsu personal developers. mblog 3.5.0 and previous versions contain a security loophole, which stems from a mishandling of the parameter Title in the document/admin/post/list that resulted in a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-26

Last Modified

2026-02-24

References

https://vuldb.com/?submit.634158 https://vuldb.com/?id.321273 https://vuldb.com/?ctiid.321273 https://gitee.com/mtons/mblog/issues/ICPMMQ https://nvd.nist.gov/vuln/detail/CVE-2025-9432

Share on: