Vulnerabilities

TI-2025-12631 CVE-2025-13816 · GHSA-886v-hrxv-5rgm

moxi159753 Mogu Blog v2 ZIP File unzipFile FileOperation.unzip path traversal

MEDIUM 57

A security vulnerability has been detected in moxi159753 Mogu Blog v2 up to 5.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00691 Published 2025-12-01 No fix listed CWE-22

TI-2025-12630 CVE-2025-13815 · GHSA-69mp-993w-437h

MEDIUM 57

A weakness has been identified in moxi159753 Mogu Blog v2 up to 5.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00415 Published 2025-12-01 No fix listed CWE-284

TI-2025-12629 CVE-2025-13814 · GHSA-rfjw-j3x6-277p

HIGH 70

A security flaw has been discovered in moxi159753 Mogu Blog v2 up to 5.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00577 Published 2025-12-01 No fix listed CWE-918

TI-2025-12628 CVE-2025-13813 · GHSA-f45p-2w4f-m93w

MEDIUM 61

A vulnerability was identified in moxi159753 Mogu Blog v2 up to 5.2.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00512 Published 2025-12-01 No fix listed CWE-862

TI-2023-01976 CVE-2023-2101 · GHSA-cq94-r34h-px95

LOW 30

A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00846 Published 2023-04-15 No fix listed CWE-36

TI-2022-12675 CVE-2022-30517 · GHSA-w3jx-w59w-3c78

LOW 28

Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00636 Published 2022-07-12 No fix listed CWE-79