CVE-2025-60355

9.8CRITICAL

zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

Published: 10/28/2025Updated: 1/8/2026
View on NVDView on MITRE

Description

zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

AI AnalysisPowered by AI

Affected Products

zhydoneblog

References