CVE-2026-90568 in Mogu Blog v2info

Prediction

by VulDB Data Team • 09/12/2026

A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/templates/info.ftl of the component blogSort Endpoint. The manipulation of the argument sortName results in cross site scripting. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsible

VulDB

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

low

Sector

Education

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!