Cross-site Scripting (XSS)

hexo is vulnerable to cross-site scripting. The attack exists due to insufficient sanitations in the html tag and body values allowing local unauthenticated attackers to inject and execute arbitrary javascript in victim's browser...