CVE-2025-60355 | zhangyd-c OneBlog up to 2.3.8 FreeMarker Template special elements used in a template engine

October 28, 2025 Yanac

A vulnerability identified as problematic has been detected in zhangyd-c OneBlog up to 2.3.8. The affected element is an unknown function of the component FreeMarker Template Handler. This manipulation causes improper neutralization of special elements used in a template engine.

This vulnerability is registered as CVE-2025-60355. The attack requires access to the local network. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More