Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-90568

moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting

CVSS 4.0 5.1 MEDIUMCVSS 3.1 3.5 LOWCVSS 3.0 3.5 LOWCVSS 2.0 4.0 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-90568

Published

A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/templates/info.ftl of the component blogSort Endpoint. The manipulation of the argument sortName results in cross site scripting. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-90568

Published

Mogu Blog v2

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "moxi624",
                    "product": "Mogu Blog v2",
                    "versions": [
                        {
                            "version": "4.0",
                            "status": "affected"
                        },
                        {
                            "version": "4.1",
                            "status": "affected"
                        },
                        {
                            "version": "4.2",
                            "status": "affected"
                        },
                        {
                            "version": "4.3",
                            "status": "affected"
                        },
                        {
                            "version": "4.4",
                            "status": "affected"
                        },
                        {
                            "version": "4.5",
                            "status": "affected"
                        },
                        {
                            "version": "5.0",
                            "status": "affected"
                        },
                        {
                            "version": "5.1",
                            "status": "affected"
                        },
                        {
                            "version": "5.2",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:moxi624:mogu_blog_v2:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "blogSort Endpoint"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON