Description
A security vulnerability has been detected in mtons mblog up to 3.5.0. This vulnerability affects unknown code of the file /post/submit of the component Post Handler. The manipulation of the argument content/title/ leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mtons | mblog | 3.0, 3.1, 3.2, 3.3, 3.4, 3.5.0 | — |
References
- VDB-321270 | mtons mblog Post submit cross site scripting vdb-entry technical-description
- VDB-321270 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #634153 | mtons https://gitee.com/mtons/mblog <=3.5.0 Stored XSS third-party-advisory
- Submit #634155 | mtons https://gitee.com/mtons/mblog <=3.5.0 Stored XSS (Duplicate) third-party-advisory
- https://gitee.com/mtons/mblog/issues/ICPMLJ issue-tracking
- https://gitee.com/mtons/mblog/issues/ICPMLW exploit issue-tracking