Filtered by vendor Hexo
Subscribe
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-39584 | 1 Hexo | 1 Hexo | 2024-11-21 | N/A | 7.5 HIGH |
|
Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.
|
|||||
| CVE-2021-25987 | 1 Hexo | 1 Hexo | 2024-11-21 | 1.9 LOW | 5.0 MEDIUM |
|
Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.
|
|||||