A vulnerability classified as problematic was found in mtons mblog up to 3.5.0. Affected by this vulnerability is an unknown functionality of the file /settings/profile. Executing manipulation of the argument signature can lead to cross site scripting.
The identification of this vulnerability is CVE-2025-9407. The attack may be launched remotely. Furthermore, there is an exploit available.
Other parameters might be affected as well.
