CVE-2017-16230

In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit...

CVE-2017-16230

In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit...

PT-2017-14359

Name of the Vulnerable Software and Affected Versions Typecho versions prior to 1.1 Description The issue allows an attacker to log in to the background page, create a new article, and inject malicious payload into the article content, resulting in a cross-site scripting XSS attack via the...

CVE-2017-16230: Improper Neutralization of Input During Web Page Generation

In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit...