Lucene search

K
osvGoogleOSV:GHSA-G784-Q3P3-26RM
HistoryMay 24, 2022 - 4:59 p.m.

hexo-admin plugin for Node.js XSS Vulnerability

2022-05-2416:59:45
Google
osv.dev
7
hexo-admin
node.js
xss
vulnerability
post editor
stored xss

EPSS

0.001

Percentile

46.3%

The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.

EPSS

0.001

Percentile

46.3%

Related for OSV:GHSA-G784-Q3P3-26RM