CVE-2025-9430: mtons mblog update cross site scripting

Severity: medium (CVSS 4.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-08-26 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability was detected in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/options/update. The manipulation of the argument input results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.

Affected products

mtons mblog: through 3.5.0

References

https://gitee.com/mtons/mblog/issues/ICPMMF
https://vuldb.com/?ctiid.321271
https://vuldb.com/?id.321271
https://vuldb.com/?submit.634156

Get alerted when CVE-2025-9430 or the next vulnerability affects your stack