Moxi624

8 CVEs across 2 Moxi624 products. Browse Moxi624 vulnerabilities, severities, and proof-of-concept exploits.

Moxi624 products with known CVEs

ProductCVEs
Mogublog5
Mogu Blog V23
Moxi624 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-109177Medium4.32026-10-12MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-di…
CVE-2026-109176Medium5.42026-10-12MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other administrators' files…
CVE-2026-109175Medium4.32026-10-12MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-…
CVE-2026-109174Medium6.52026-10-12MoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read system credentials via the getSystemCo…
CVE-2026-90568Low3.52026-09-13A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resourc…
CVE-2026-89260High7.52026-09-11MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.inde…
CVE-2026-6625High7.32026-04-20A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the function LocalFileServiceImpl.uploadPicture…
CVE-2023-2101Medium4.32023-04-15A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affects the function uploadPictureByUrl of t…