A vulnerability was found in mtons mblog up to 3.5.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/role/list. This manipulation of the argument Name causes cross site scripting.
This vulnerability appears as CVE-2025-9647. The attack may be initiated remotely. In addition, an exploit is available.
