Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-25987

Hexo - Stored XSS

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Hexo
Products
Hexo
CVE-2023-39584

Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.

CVSS 3.1 · 7.5 High EPSS 34.5% KEV · Not listed
Vendors
Hexo
Products
Hexo