Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Fatboyer

#46356of 56,330
6.1Total CVSS
Vulnerabilities · 1
PT-2024-21171
6.1
2024-03-02
Unknown · Hexo-Theme-Anzhiyu · CVE-2024-25865
**Name of the Vulnerable Software and Affected Versions** hexo-theme-anzhiyu version 1.6.12 **Description** The issue is a Cross Site Scripting (XSS) vulnerability that allows remote attackers to execute arbitrary code via the algolia search function. **Recommendations** For hexo-theme-anzhiyu version 1.6.12, consider disabling the algolia search function until a patch is available. Restrict access to the algolia search module to minimize the risk of exploitation. Avoid using the algolia search function in the affected version until the issue is resolved.