Submeter #580567: https://gitee.com/moonlightL https://gitee.com/moonlightL/hexo-boot hexo-boot-4.3.0 Improper Neutralization of Alternate XSS Syntaxinformação

Títulohttps://gitee.com/moonlightL https://gitee.com/moonlightL/hexo-boot hexo-boot-4.3.0 Improper Neutralization of Alternate XSS Syntax
DescriçãoThe hexo-boot-4.3.0 blog backend has an XSS vulnerability. Attackers can construct payloads to bypass filtering, achieve XSS pop-ups, and cause the leakage of victims' privacy and cookies.
Fonte⚠️ https://github.com/trengh222/hexo-boot-xss1.0/blob/yhtt/README.md
Utilizador
 trengh (UID 85464)
Submissão19/05/2025 10h23 (há 1 Ano)
Moderação20/05/2025 15h49 (1 day later)
EstadoAceite
Entrada VulDB309663 [moonlightL hexo-boot 4.3.0 Blog Backend /admin/home/index.html Description Script de Site Cruzado]
Pontos16

Do you want to use VulDB in your project?

Use the official API to access entries easily!