VendorsMoguBlog Projectmogublogall versions
Vulnerabilities

MoguBlog Project MoguBlog (Mushroom Blog)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2025-13814
moxi159753 Mogu Blog v2 uploadPicsByUrl LocalFileServiceImpl.uploadPictureByUrl server-side request forgery
Published 2025-12-01 · Analyzed
9.8EPSS 0.005
CVE-2025-13815
moxi159753 Mogu Blog v2 pictures unrestricted upload
Published 2025-12-01 · Analyzed
9.8EPSS 0.004
CVE-2025-13816
moxi159753 Mogu Blog v2 ZIP File unzipFile FileOperation.unzip path traversal
Published 2025-12-01 · Analyzed
8.8EPSS 0.006
CVE-2025-13813
moxi159753 Mogu Blog v2 Storage Management Endpoint storage authorization
Published 2025-12-01 · Analyzed
8.1EPSS 0.005
CVE-2023-2101
moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal
Published 2023-04-15 · Modified
6.5EPSS 0.008
CVE-2022-30517
Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).
Published 2022-07-12 · Modified
6.1EPSS 0.006