zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

Published Oct 28, 2025 · Updated Mar 4, 2026 · Assigned by mitre