CyberRota Analysis
AI-GeneratedThe vulnerability in Mogu Blog versions up to 5.2 allows for cross-site scripting (XSS) via the BlogSortServiceImpl.addBlogSort function, where improper handling of the sortName argument can be exploited remotely. This could lead to unauthorized script execution in the context of a user's session, potentially compromising user data or session integrity. Organizations using this blogging platform should prioritize remediation to mitigate the risk of XSS attacks.
Original NVD Description
A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/templates/info.ftl of the component blogSort Endpoint. The manipulation of the argument sortName results in cross site scripting. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.