Lucene search

Hexo Security Vulnerabilities

cve

CVE-2019-17606

The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a...

6.1CVSS

5.8AI Score

0.001EPSS

2019-10-23 05:15 PM

cve

CVE-2023-39584

Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read...

7.5CVSS

7.5AI Score

0.001EPSS

2023-09-08 01:15 PM

cve

CVE-2021-25987

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary...

5CVSS

4.7AI Score

0.0004EPSS

2021-11-30 02:15 PM