CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2020-21038
https://notcve.org/view.php?id=CVE-2020-21038
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php. • https://github.com/typecho/typecho https://github.com/typecho/typecho/issues/952 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2023-30184
https://notcve.org/view.php?id=CVE-2023-30184
A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment. • https://github.com/typecho/typecho/issues/1546 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 2CVE-2023-27711
https://notcve.org/view.php?id=CVE-2023-27711
Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component. • https://github.com/typecho/typecho/issues/1539 https://srpopty.github.io/2023/03/02/Typecho-V1.2.0-Backend-Reflected-XSS-cid • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-27131
https://notcve.org/view.php?id=CVE-2023-27131
Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Post Editorparameter. • https://github.com/typecho/typecho/issues/1536 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-27130
https://notcve.org/view.php?id=CVE-2023-27130
Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied URL parameter. • https://github.com/typecho/typecho/commit/f9ede542c9052ba22a6096d8412e2f02d9de872b https://github.com/typecho/typecho/issues/1535 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •