CVE-2021-46028

In mblog <= 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted.

• CWE-352

• https://github.com/langhsu/mblog/issues/50Exploit, Issue Tracking, Third Party Advisory
• https://github.com/langhsu/mblog/issues/50Exploit, Issue Tracking, Third Party Advisory

Published

Jan 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-46022An Use-After-Free vulnerability in rec_mset_elem_destroy() a…5.5
• CVE-2021-46023An Untrusted Pointer Dereference was discovered in function …7.5
• CVE-2021-46024Projectworlds online-shopping-webvsite-in-php 1.0 suffers fr…9.8
• CVE-2021-46025A Cross SIte Scripting (XSS) vulnerability exists in OneBlog…5.4
• CVE-2021-46026mysiteforme, as of 19-12-2022, is vulnerable to Cross Site S…5.4
• CVE-2021-46027mysiteforme, as of 19-12-2022, has a CSRF vulnerability in t…6.5
• CVE-2021-46030There is a Cross Site Scripting attack (XSS) vulnerability i…5.4
• CVE-2021-46033In ForestBlog, as of 2021-12-28, File upload can bypass veri…9.8
• CVE-2021-46034A problem was found in ForestBlog, as of 2021-12-29, there i…6.1
• CVE-2021-46036An arbitrary file upload vulnerability in the component /ms/…9.8
• CVE-2021-46037MCMS v5.2.4 was discovered to contain an arbitrary file dele…8.1
• CVE-2021-46038A Pointer Dereference vulnerability exists in GPAC 1.0.1 in …5.5