There are two stored XSS vulnerability

[m4yfly]

A xss vulnerability was discovered in mblog.
In mblog3.5, stored XSS exists via the /post/editing value parameter, which allows remote attackers to inject arbitrary web script or HTML.
poc

xss payload:
<img src=x onerror=alert(1)>

Another stored XSS exists via the /settings/profile value parameter, which allows remote attackers to inject arbitrary web script or HTML.

poc

xss payload:
<img src=x onerror=alert(1)>