OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notice Manage module.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')