Mogublog Security Vulnerabilities

CVE-2022-30517

Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).

CVE-2023-2101

A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affects the function uploadPictureByUrl of the file /mogu-picture/file/uploadPicsByUrl. The manipulation of the argument urlList leads to absolute path traversal. The attack may be ini...