A vulnerability classified as problematic has been found in mtons mblog up to 3.5.0. Impacted is an unknown function of the file /search. This manipulation of the argument kw causes cross site scripting.

This vulnerability is handled as CVE-2025-9431. The attack can be initiated remotely. Additionally, an exploit exists.