Moxi624 Mogublog
5 CVEs affecting Moxi624 Mogublog. Latest disclosed: 2026-10-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-89260 | High | 7.5 | 2026-09-11 | MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.inde… |
CVE-2026-109174 | Medium | 6.5 | 2026-10-12 | MoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read system credentials via the getSystemCo… |
CVE-2026-109176 | Medium | 5.4 | 2026-10-12 | MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other administrators' files… |
CVE-2026-109177 | Medium | 4.3 | 2026-10-12 | MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-di… |
CVE-2026-109175 | Medium | 4.3 | 2026-10-12 | MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-… |