CVE-2023-30184

A stored cross-site scripting XSS vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment...

CVE-2023-30184

CVE-2023-30184 describes a stored XSS in Typecho v1.2.0. The vulnerability is triggered via a crafted payload in the URL parameter of /index.php/archives/1/comment, enabling execution of arbitrary web scripts/HTML. CVSSv3.1 base score is 5.4 (Network, Low/Low, User Interaction Required). Exploita...

CVE-2023-30184

A stored cross-site scripting XSS vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment...