Information from appleple Inc.

Vulnerability ID:JVN#73166466
Title:a-blog cms vulnerable to cross-site scripting
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.