| 标题 | https://gitee.com/moonlightL https://gitee.com/moonlightL/hexo-boot hexo-boot-4.3.0 Improper Neutralization of Alternate XSS Syntax |
|---|
| 描述 | The hexo-boot-4.3.0 blog backend has an XSS vulnerability. Attackers can construct payloads to bypass filtering, achieve XSS pop-ups, and cause the leakage of victims' privacy and cookies. |
|---|
| 来源 | ⚠️ https://github.com/trengh222/hexo-boot-xss2.0 |
|---|
| 用户 | trengh (UID 85464) |
|---|
| 提交 | 2025-05-19 10時41分 (1 年前) |
|---|
| 管理 | 2025-05-20 15時49分 (1 day later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 309664 [moonlightL hexo-boot 4.3.0 Dynamic List Page /admin/home/index.html 跨网站脚本] |
|---|
| 积分 | 16 |
|---|