Gửi #580588: https://gitee.com/moonlightL https://gitee.com/moonlightL/hexo-boot hexo-boot-4.3.0 Improper Neutralization of Alternate XSS Syntaxthông tin

tiêu đềhttps://gitee.com/moonlightL https://gitee.com/moonlightL/hexo-boot hexo-boot-4.3.0 Improper Neutralization of Alternate XSS Syntax
Mô tảThe hexo-boot-4.3.0 blog backend has an XSS vulnerability. Attackers can construct payloads to bypass filtering, achieve XSS pop-ups, and cause the leakage of victims' privacy and cookies.
Nguồn⚠️ https://github.com/trengh222/hexo-boot-xss2.0
Người dùng
 trengh (UID 85464)
Đệ trình19/05/2025 10:41 (cách đây 1 Năm)
Kiểm duyệt20/05/2025 15:49 (1 day later)
Trạng tháiđược chấp nhận
Mục VulDB309664 [moonlightL hexo-boot 4.3.0 Dynamic List Page /admin/home/index.html Tập lệnh chéo trang]
điểm16

Want to know what is going to be exploited?

We predict KEV entries!