CVE-2024-28713

The Mblog Blog system v.3.5.0 is vulnerable to arbitrary code execution due to an issue in the theme management feature . An attacker can exploit this by providing a crafted file to the system. To mitigate this risk, it is recommended to disable the theme management feature until a patch is avail...