Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:45 a.m.•13 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.8AI score0.00534EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2024/03/03 12:30 a.m.•28 views

hexo-theme-anzhiyu Cross-site Scripting vulnerability

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.7AI score0.00534EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2024/03/02 10:15 p.m.•26 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.2AI score0.00534EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/03/02 12:00 a.m.•16 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.1AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/02 12:00 a.m.•31 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.5AI score0.00534EPSS
SaveExploits1References1
Mend
Mend
•added 2024/03/02 12:00 a.m.•3 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS0.00534EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/03/02 12:00 a.m.•15 views

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.5AI score0.00534EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/02 12:00 a.m.•6 views

CVE-2024-25865: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

6.1CVSS6.6AI score0.00534EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/03/02 12:00 a.m.•4 views

PT-2024-21171

Name of the Vulnerable Software and Affected Versions hexo-theme-anzhiyu version 1.6.12 Description The issue is a Cross Site Scripting XSS vulnerability that allows remote attackers to execute arbitrary code via the algolia search function. Recommendations For hexo-theme-anzhiyu version 1.6.12,...

6.1CVSS0.00534EPSS
SaveExploits1References10
Rows per page
Query Builder