CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

CVE-2023-47435

An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages...

CVE-2023-47435

An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages...

hexo-theme-matery security vulnerabilities

hexo-theme-matery is a comprehensive and beautiful Hexo theme based on material design and responsive design by the individual developers at blinkfox. A security vulnerability exists in hexo-theme-matery version v2.0.0, which originated from a vulnerability that allows an attacker to bypass...

CVE-2023-47435: Authentication Bypass by Capture-replay

An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages...

PT-2024-13451 · Unknown · Hexo-Theme-Matery

Name of the Vulnerable Software and Affected Versions: hexo-theme-matery version 2.0.0 Description: The issue lies in the verifyPassword function, allowing attackers to bypass authentication and access password-protected pages. Recommendations: For hexo-theme-matery version 2.0.0, as a temporary...

hexo-theme-anzhiyu Cross-site Scripting vulnerability

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

CVE-2024-25865: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

hexo-theme-anzhiyu Security Vulnerabilities

hexo-theme-anzhiyu is a clean hexo theme by the personal developer of Chen Zhiwei anzhiyu-c. A security vulnerability exists in hexo-theme-anzhiyu v1.6.12, which stems from a cross-site scripting XSS vulnerability in the algolia search function...

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

PT-2024-21171

Name of the Vulnerable Software and Affected Versions hexo-theme-anzhiyu version 1.6.12 Description The issue is a Cross Site Scripting XSS vulnerability that allows remote attackers to execute arbitrary code via the algolia search function. Recommendations For hexo-theme-anzhiyu version 1.6.12,...

hexo-theme-shokax (>=0.3.12, <=0.4.2) potentially affected by CVE-2023-39584 via hexo (7.0.0)

hexo NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on hexo and may be impacted: - hexo-theme-shokax =0.3.12, =0.4.2 Source cves: CVE-2023-39584 Source advisory: GHSA-X2JC-989C-47Q4...

hexo-theme-shokax (>=0.3.12, <=0.4.2) potentially affected by CVE-2023-39584 via hexo (7.0.0)

hexo NPM version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on hexo and may be impacted: - hexo-theme-shokax =0.3.12, =0.4.2 Source cves: CVE-2023-39584 Source advisory: OSV:GHSA-X2JC-989C-47Q4...