CVE-2026-30689: ANJOY8 Blog.admin

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end code that does not offer an API service.

Affected products

• ANJOY8 Blog.admin: version 8.0 only

Published 2026-03-27. Last modified 2026-07-02.