Cross-Site Scripting (XSS)

2019-10-2106:05:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.001

Percentile

46.3%

JSON

hexo-admin is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the post-editor. Successful exploitation can result in the theft of session cookies or execution of unauthorized actions on behalf of the user.