moxi624 Mogu Blog v2

• CVE-2026-90568 Low 3.5 moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting 0.3%
• CVE-2026-6625 High 7.3 moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgery 0.3%
• CVE-2023-2101 Medium 4.3 moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal 0.8%