high7.8
CVE-2021-27280
OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected.
Impact
OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mblog Project | Mblog | Version 3.5.0 |