Skip to main content

Mogublog CVE-2022-30517

MEDIUM
Cross-site Scripting (XSS) (CWE-79)
2022-07-12 cve@mitre.org
XSS Mogublog Mogublog Project
6.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.1 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 12, 2022 - 23:15 nvd
MEDIUM 6.1

DescriptionNVD

Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).

AnalysisAI

Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Affected products include: Mogublog Project Mogublog.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.

More in Mogublog

View all
CVE-2026-89262 HIGH POC
8.7 Sep 11

Unauthenticated arbitrary comment deletion in MoguBlog through 6.2 allows remote attackers to permanently remove any com
CVE-2026-89260 HIGH POC
8.7 Sep 11

Unauthenticated XML external entity injection in MoguBlog through version 6.2 allows remote attackers to read arbitrary

CVE-2026-89263 MEDIUM POC
6.9 Sep 11

Unauthenticated integrity manipulation in MoguBlog through 6.2 allows any remote caller to silently disable email reply

CVE-2026-89261 MEDIUM POC
6.9 Sep 11

Unauthenticated access to Elasticsearch index management endpoints in MoguBlog's mogu_search microservice (through versi
CVE-2023-2101 MEDIUM POC
6.5 Apr 15

A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. Rated medium sev
CVE-2025-13814 MEDIUM POC
5.5 Dec 01

Server-side request forgery in Mogu Blog v2 up to version 5.2 allows remote, unauthenticated attackers to force the serv
CVE-2026-89265 MEDIUM POC
5.3 Sep 11

Missing authorization on a MoguBlog admin-backend endpoint allows authenticated back-office users to retrieve image-cate
CVE-2026-89264 MEDIUM POC
5.3 Sep 11

Comment author spoofing in MoguBlog through version 6.2 allows any authenticated user to post comments attributed to arb
CVE-2025-13813 LOW POC
2.9 Dec 01

Missing authorization in the Storage Management Endpoint of Mogu Blog v2 (up to version 5.2) enables unauthenticated rem
CVE-2025-13816 LOW POC
2.1 Dec 01

Authenticated path traversal in Mogu Blog v2 up to 5.2 allows remote attackers to write files to arbitrary directories v
CVE-2025-13815 LOW POC
2.1 Dec 01

Unrestricted file upload in Mogu Blog v2 up to version 5.2 allows remote attackers with low privileges to upload arbitra

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all
CVE-2020-3580 MEDIUM POC
6.1
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2016-8581 MEDIUM POC
6.1
CVE-2013-5223 MEDIUM POC
5.4
CVE-2025-52367 MEDIUM POC
5.4

Same technique XSS

View all
CVE-2017-9248 CRITICAL POC
9.8
CVE-2020-3580 MEDIUM POC
6.1
CVE-2013-1710 CRITICAL POC
10.0
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2024-52875 HIGH POC
8.8

Share

CVE-2022-30517 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy