Mojoportal v2.7 was discovered to contain an authenticated XML external entity (XXE) injection vulnerability.
CWE-611, CWE-611