Description
A flaw has been found in mtons mblog up to 3.5.0. Impacted is an unknown function of the file /search. This manipulation of the argument kw causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mtons | mblog | 3.0, 3.1, 3.2, 3.3, 3.4, 3.5.0 | — |
References
- VDB-321272 | mtons mblog search cross site scripting vdb-entry technical-description
- VDB-321272 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #634157 | mtons https://gitee.com/mtons/mblog <=3.5.0 Reflected XSS third-party-advisory
- https://gitee.com/mtons/mblog/issues/ICPMML exploit issue-tracking