Skip to content
Threat Feed
Subscribe

Product

MoguBlog (<= 6.2)

1 brief RSS
high advisory

MoguBlog XML External Entity Injection in WeChat Callback

MoguBlog versions through 6.2 are vulnerable to unauthenticated XML External Entity (XXE) injection via the WeChat callback handler, allowing arbitrary file read and outbound SSRF.

MoguBlog web-vulnerability xxe injection
1r 2t 1c