Mogublog Project Mogublog — known CVE vulnerabilities

Every CVE whose affected-product data names Mogublog Project Mogublog, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2025-13814 — CVSS 7.3 (high): A security flaw has been discovered in moxi159753 Mogu Blog v2 up to 5.2. Impacted is the function LocalFileServiceImpl.uploadPictureByUrl…
• CVE-2025-13815 — CVSS 6.3 (medium): A weakness has been identified in moxi159753 Mogu Blog v2 up to 5.2. The affected element is an unknown function of the file…
• CVE-2025-13816 — CVSS 6.3 (medium): A security vulnerability has been detected in moxi159753 Mogu Blog v2 up to 5.2. The impacted element is the function FileOperation.unzip…
• CVE-2022-30517 — CVSS 6.1 (medium): Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).
• CVE-2025-13813 — CVSS 5.6 (medium): A vulnerability was identified in moxi159753 Mogu Blog v2 up to 5.2. This issue affects some unknown processing of the file /storage/ of…
• CVE-2023-2101 — CVSS 4.3 (medium): A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affects the function…