CVE-2025-13815 | moxi159753 Mogu Blog v2 up to 5.2 /file/pictures filedatas unrestricted upload

November 30, 2025 Yanac

A vulnerability was found in moxi159753 Mogu Blog v2 up to 5.2. It has been rated as critical. The affected element is an unknown function of the file /file/pictures. This manipulation of the argument filedatas causes unrestricted upload.

This vulnerability appears as CVE-2025-13815. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More