Unrestricted API

Blogifier uses an unrestricted API. A lack of validation in the pathname allows an unauthenticated remote attacker to gain access to the unprotected API and perform unauthorized actions.