Hexo

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Hexo records in CISA KEV

No Hexo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-20692 CVE-2023-39584 · GHSA-x2jc-989c-47q4

MEDIUM 64

Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.34538 Published 2023-09-08 Fixed in 7.2.0 CWE-22

TI-2021-07993 CVE-2021-25987 · GHSA-q54r-r9pr-w7qv

MEDIUM 56

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS.

CVSS 3.1MEDIUM 5.0 Local No auth User interaction EPSS 0.00339 Published 2021-11-30 Fixed in 6.0.0 CWE-79