CVE-2017-16230

In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-10-30

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Typecho (Typecho)

References

• https://github.com/SQYY/CVE/blob/master/Typecho.txt