Cross Site Scripting Vulnerability in Typecho from Typecho
CVE-2023-27130

4.8MEDIUM

Key Information:

Vendor

Typecho

Status
Typecho
Vendor
CVE Published:
16 March 2023

What is CVE-2023-27130?

A Cross Site Scripting vulnerability in Typecho version 1.2.0 allows remote attackers to execute arbitrary code by manipulating a URL parameter. By exploiting this weakness, attackers can inject malicious scripts into web pages viewed by other users, potentially leading to unauthorized actions or data theft.

References

https://github.com/typecho/typecho/issues/1535
https://github.com/typecho/typecho/commit/f9ede542c9052ba...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.