CVE-2025-60355

zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

More information : https://github.com/line2222/vuln/issues/4