Typecho

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-46494 MEDIUM POC This Month

A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Typecho

NVD

CVSS 3.1

5.4

EPSS

0.1%

CVE-2024-57369 MEDIUM This Month

Clickjacking vulnerability in typecho v1.2.1. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Typecho

NVD GitHub

CVSS 3.1

6.4

EPSS

0.1%

CVE-2024-46494

EPSS 0% CVSS 5.4

MEDIUM POC This Month

XSS Typecho

NVD

CVE-2024-57369

EPSS 0% CVSS 6.4

MEDIUM This Month

Clickjacking vulnerability in typecho v1.2.1. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Typecho

NVD GitHub