MEDIUM
mtons mblog list cross site scripting
Published Aug 29, 2025
5.3
MEDIUMCVSS 4.0
EPSS 0.36%
Description
A weakness has been identified in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/role/list. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected products
-
Affected
- 3.0
- 3.1
- 3.2
- 3.3
- 3.4
- 3.5.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-26189 Advisory
- https://gitee.com/mtons/mblog/issues/ICPMNE exploitissue-trackingIssue TrackingVendor Advisory
- https://vuldb.com/?ctiid.321854 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.321854 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.636627 third-party-advisoryThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-26189 | Advisory | |
| https://gitee.com/mtons/mblog/issues/ICPMNE | exploitissue-trackingIssue TrackingVendor Advisory | |
| https://vuldb.com/?ctiid.321854 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.321854 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.636627 | third-party-advisoryThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Aug 29, 2025
Updated Aug 29, 2025
Reserved Aug 29, 2025
Link CVE-2025-9647
CISA Vulnrichment
Updated Aug 29, 2025
Red Hat
No data
GitHub
No data