A vulnerability was found in blog.admin up to 8.0. It has been rated as problematic. Affected is the function getinfobytoken of the component API Interface. Performing a manipulation results in improper access controls.

This vulnerability was named CVE-2026-30689. The attack may be initiated remotely. There is no available exploit.