Skip to content
OpenAdvisories
Unscored CVE-2017-16230 EUVD-2017-7427GHSA-h568-5cg3-g6rv

In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article …

Published Oct 30, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit.

References