Anjoy8 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Anjoy8 products: 1 record(s), with severity, exploitation and fixes.

Blog.admin 1 Blog.Core 1

Exploited only (KEV) →

CVE-2026-30689 Medium · 4.3 CWE-863 Mar 27, 2026

Incorrect Authorization in Anjoy8 Blog.admin

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end code that does not offer an API service.