A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an Article.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://h40vv3n.github.io/2024/09/05/typecho-xss/ | Exploit |
| https://h40vv3n.github.io/2024/09/05/typecho-xss/ | Exploit |
Configurations
History
23 Apr 2025, 12:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://h40vv3n.github.io/2024/09/05/typecho-xss/ - Exploit | |
| CPE | cpe:2.3:a:typecho:typecho:1.2.1:-:*:*:*:*:*:* | |
| First Time |
Typecho
Typecho typecho |
07 Apr 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-07 20:15
Updated : 2025-04-23 12:33
NVD link : CVE-2024-46494
Mitre link : CVE-2024-46494
JSON object : View
Products Affected
typecho
- typecho
CWE
No CWE.