Threats tagged 'ghsa-7hrx-vv78-95j8'

1 threat

Threats tagged 'ghsa-7hrx-vv78-95j8'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.4%	CVE-2026-89264MoguBlog · Authorization Bypass Through User-Controlled Key Medium4.3EPSS 0.4%2026-09-11CVE Database V5CVE-2026-89264 MoguBlog through 6.2 fails to validate the comment author identity in the POST /web/comment/add endpoint, allowing authenticated users to post comments attributed to any other user. Attackers can supply arbitrary userUid values in the request body to impersonate other accounts including administrators. EPSS 0.4%Vulnerability moxi624 #ghsa-7hrx-vv78-95j8	CVE Database V5	2026-09-11

Showing 1–1 of 1 result