A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting.
This vulnerability is traded as CVE-2025-8740. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
