Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS04MmpmLThmMjQteHE5bc4AA5t8
hexo-theme-anzhiyu Cross-site Scripting vulnerability
Cross Site Scripting (XSS) vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function.
Permalink: https://github.com/advisories/GHSA-82jf-8f24-xq9mJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04MmpmLThmMjQteHE5bc4AA5t8
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 2 months ago
Updated: about 2 months ago
Identifiers: GHSA-82jf-8f24-xq9m, CVE-2024-25865
References:
- https://nvd.nist.gov/vuln/detail/CVE-2024-25865
- https://github.com/anzhiyu-c/hexo-theme-anzhiyu/issues/200
- https://github.com/advisories/GHSA-82jf-8f24-xq9m
Blast Radius: 0.0
Affected Packages
npm:hexo-theme-anzhiyu
Dependent packages: 1Dependent repositories: 1
Downloads: 1,452 last month
Affected Version Ranges: = 1.6.12
No known fixed version
All affected versions: 1.6.12