CVE-2025-13815

CVE-2025-13815 affects moxi159753 Mogu Blog v2 up to 5.2. The vulnerability occurs in an unknown function under the endpoint /file/pictures where manipulating the argument filedatas enables an unrestricted file upload. The attack is remote and public exploit PoCs exist. Multiple sources confirm t...

PT-2025-48428

Name of the Vulnerable Software and Affected Versions Mogu Blog v2 versions up to 5.2 Description A weakness exists in Mogu Blog v2 up to version 5.2. This issue involves the manipulation of the filedatas argument within an unknown function of the /file/pictures endpoint, leading to unrestricted...