Advisories · Technology

moxi624 Mogu Blog v2.

Every CVE that names moxi624 Mogu Blog v2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-90568 CVE record

CVSS 5.1 Medium

moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting
- moxi624 Mogu Blog v2
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 13 Sept 2026
CVE-2026-6625 CVE record

CVSS 6.9 Medium

moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgery
- moxi624 Mogu Blog v2
- Server-side request forgery (SSRF)
Not analysed yet 20 Apr 2026
CVE-2023-2101 CVE record

CVSS 4.3 Medium

moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal
- moxi624 Mogu Blog v2
- Path traversal
Not analysed yet 15 Apr 2023