Lucene search
GoogleOSV:GHSA-Q54R-R9PR-W7QVHistoryDec 01, 2021 - 6:27 p.m.
Hexo Vulnerable to XSS
2021-12-0118:27:44
Google
osv.dev
7
hexo
xss
vulnerable
arbitrary code
web page
generation
unprivileged attacker
EPSS
0
Percentile
12.6%
Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.
Related
prion
prion
Cross site scripting
2021-11-30 14:15:00
nvd
nvd
CVE-2021-25987
2021-11-30 14:15:07
cnvd
cnvd
Hexo cross-site scripting vulnerability
2021-12-01 00:00:00
cvelist
cvelist
CVE-2021-25987 Hexo - Stored XSS
2021-11-30 13:50:09
veracode
veracode
Cross-site Scripting (XSS)
2021-12-01 08:54:58
github
github
Hexo Vulnerable to XSS
2021-12-01 18:27:44
cve
cve
CVE-2021-25987
2021-11-30 14:15:07