CVE-2023-27130

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied URL parameter.

CVSS v3.1

4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1

4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.58% chance of exploitation in the next 30 days, 45th percentile

Published

2023-03-16

Updated

2025-03-03

Proof-of-concept exploits (1)

• typecho/typecho/issues/1535

References

• CVE Record
• NVD entry

Related

• CVE-2023-24114
• CVE-2023-30184
• CVE-2023-49967
• CVE-2023-27121
• CVE-2023-27132
• CVE-2023-27119