mblog security vulnerabilities

mblog is a blog system by langhsu individual developer. A security vulnerability exists in mblog 3.5.0 and earlier versions, which originates from a cross-site scripting attack due to a misuse of the parameter Name in the file /admin/user/list...