CVE Intelligence

Anjoy8 Blog.admin vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Anjoy8 Blog.admin: 1 record(s), with affected versions and fixes.
cpe:2.3:a:anjoy8:blog.admin

CVE-2026-30689 Medium · 4.3 CWE-863 Mar 27, 2026
Incorrect Authorization in Anjoy8 Blog.admin
In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end code that does not offer an API service.