OneBlog v2.3.6 was discovered to contain a template injection vulnerability via the template management department.