Vulnerability Details CVE-2017-16230
In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.1%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2017-16230
-
cpe:2.3:a:typecho:typecho:-
-
cpe:2.3:a:typecho:typecho:0.9-13.12.1
-
cpe:2.3:a:typecho:typecho:0.9-13.12.10
-
cpe:2.3:a:typecho:typecho:0.9-13.12.12
-
cpe:2.3:a:typecho:typecho:0.9-13.12.6
-
cpe:2.3:a:typecho:typecho:0.9-14.5.25
-
cpe:2.3:a:typecho:typecho:1.0-14.10.10
-
cpe:2.3:a:typecho:typecho:1.0-14.10.9
-
cpe:2.3:a:typecho:typecho:1.1