Security Advisory
CVE-2021-25987
5
MEDIUM
Vulnerability Description
Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.
Published Date
November 30, 2021
Official Source
NIST NVD Advisory