PT-2025-34723 · Mblog · Mblog

Zast.Ai

·

CVE-2025-9431

·

Publicado

2025-08-26

·

Atualizado

2025-08-26

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: mtons mblog versions prior to 3.5.1
Description: A flaw has been found in mtons mblog up to version 3.5.0. The issue affects an unknown function within the /search file. Manipulation of the kw argument causes cross-site scripting. The attack can be initiated remotely. The exploit has been published and may be used.
Recommendations: Update mtons mblog to version 3.5.1 or later.

Exploit

Correção

Code Injection

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94CWE-79

Identificadores relacionados

CVE-2025-9431

Produtos afetados

Mblog