Hexo-admin Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Hexo-admin Project records in CISA KEV

No Hexo-admin Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Hexo-admin · all components

TI-2019-13141 CVE-2019-17606 · GHSA-g784-q3p3-26rm

LOW 29

The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01035 Published 2019-10-23 No fix listed CWE-79