Medium · 6.1 CVE-2019-17606 EUVD-2022-3913GHSA-g784-q3p3-26rm

hexo-admin plugin for Node.js XSS Vulnerability

Published Oct 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.

Ecosystem	Package	Affected	Fixed	Record
npm	hexo-admin	<= 2.3.0	—	GHSA-g784-q3p3-26rm