Medium · 4.8 CVE-2023-27130 EUVD-2023-30914GHSA-7gv5-g759-m6m7

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied …

Published Mar 16, 2023 · Updated Mar 3, 2025 · Assigned by mitre

Description

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied URL parameter.

References

https://github.com/typecho/typecho/issues/1535
https://github.com/typecho/typecho/commit/f9ede542c9052ba22a6096d8412e2f02d9de872b