Lucene search

China National Vulnerability DatabaseCNVD-2023-97825

HistoryDec 13, 2023 - 12:00 a.m.

typecho cross-site scripting vulnerability (CNVD-2023-9782581)

2023-12-1300:00:00

China National Vulnerability Database

www.cnvd.org.cn

typecho

php

blogging

cross-site scripting

vulnerability

user-supplied data

filtering

escaping

attacker

web script

html

cnvd-2023-9782581

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

20.0%

JSON

typecho is a PHP blogging platform for typecho personal developers that is simple and powerful. typecho 1.2.1 version of a cross-site scripting vulnerability, the vulnerability stems from the file /admin/options-theme.php on the lack of effective user-supplied data filtering and escaping, an attacker can be exploited to inject a well-designed payload to execute arbitrary Web script or HTML.