Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-46494 EUVD-2024-54392GHSA-3qpv-2q49-9qj8

A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa…

Published Apr 7, 2025 · Updated Apr 8, 2025 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an Article.

References