Skip to content
OpenAdvisories

Vendor

Hexo

1 known vulnerabilities.

Products

Hexo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2021-25987

    Hexo - Stored XSS

    Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.

    Hexo Hexo hexo npm