Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33140
HistoryDec 01, 2021 - 8:54 a.m.

Cross-site Scripting (XSS)

2021-12-0108:54:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site scripting
xss
hexo software

EPSS

0

Percentile

12.6%

hexo is vulnerable to cross-site scripting. The attack exists due to insufficient sanitations in the html tag and body values allowing local unauthenticated attackers to inject and execute arbitrary javascript in victim’s browser.

EPSS

0

Percentile

12.6%

Related for VERACODE:33140