A vulnerability, which was classified as problematic, has been found in mtons mblog up to 3.5.0. The impacted element is an unknown function of the file /admin/user/list of the component Admin Panel. Performing manipulation of the argument Name results in cross site scripting.
This vulnerability was named CVE-2025-9433. The attack may be initiated remotely. In addition, an exploit is available.
