Skip to content
OpenAdvisories

Package · npm

hexo-admin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High —
    GHSA-phph-xpj4-wvcv

    Cross-Site Scripting in hexo-admin

    All versions of `hexo-admin` are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize rendered markdown, allowing attackers to execute arbitrary JavaScript in a victim's browser if they are able to create new posts. ## Recommendation No fix…

    hexo-admin npm
  • Medium 6.1
    CVE-2019-17606

    hexo-admin plugin for Node.js XSS Vulnerability

    The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.

    hexo-admin npm