Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:45 a.m.3 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.5AI score0.00302EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2024/03/03 12:30 a.m.15 views

hexo-theme-anzhiyu Cross-site Scripting vulnerability

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.7AI score0.00302EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2024/03/02 10:15 p.m.12 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.2AI score0.00302EPSS
Exploits1References1
OSV
OSV
added 2024/03/02 10:15 p.m.4 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.1AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/02 12:0 a.m.12 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.5AI score0.00302EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/03/02 12:0 a.m.2 views

hexo-theme-anzhiyu Security Vulnerabilities

hexo-theme-anzhiyu is a clean hexo theme by the personal developer of Chen Zhiwei anzhiyu-c. A security vulnerability exists in hexo-theme-anzhiyu v1.6.12, which stems from a cross-site scripting XSS vulnerability in the algolia search function...

6.1CVSS5.8AI score0.00302EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/03/02 12:0 a.m.9 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.5AI score0.00302EPSS
Exploits1References1
CVE
CVE
added 2024/03/02 12:0 a.m.65 views

CVE-2024-25865

CVE-2024-25865 describes a Cross-Site Scripting (XSS) vulnerability in hexo-theme-anzhiyu v1.6.12, allowing remote attackers to execute arbitrary code via the algolia search function. The issue is documented across multiple sources (NVD, Red Hat, GHSA, OSV, CNNVD, etc.) with consistent descriptio...

6.1CVSS6.5AI score0.00302EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder