medium6.1
CVE-2024-25865
hexo-theme-anzhiyu Cross-site Scripting vulnerability
Impact
Cross Site Scripting (XSS) vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | hexo-theme-anzhiyu | = 1.6.12 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anzhiyu-C | Hexo-Theme-Anzhiyu | Version 1.6.12 |