Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-30184 EUVD-2023-34609GHSA-wv4v-2jhr-66qm

A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted…

Published May 4, 2023 · Updated Jan 29, 2025 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment.

References