Description
A vulnerability was detected in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/options/update. The manipulation of the argument input results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mtons | mblog | 3.0, 3.1, 3.2, 3.3, 3.4, 3.5.0 | — |
References
- VDB-321271 | mtons mblog update cross site scripting vdb-entry technical-description
- VDB-321271 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #634156 | mtons https://gitee.com/mtons/mblog <=3.5.0 Stored XSS third-party-advisory
- https://gitee.com/mtons/mblog/issues/ICPMMF exploit issue-tracking