Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-30184

A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.1%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2023-30184
  • Typecho » Typecho » Version: N/A
    cpe:2.3:a:typecho:typecho:-
  • Typecho » Typecho » Version: 0.9-13.12.1
    cpe:2.3:a:typecho:typecho:0.9-13.12.1
  • Typecho » Typecho » Version: 0.9-13.12.10
    cpe:2.3:a:typecho:typecho:0.9-13.12.10
  • Typecho » Typecho » Version: 0.9-13.12.12
    cpe:2.3:a:typecho:typecho:0.9-13.12.12
  • Typecho » Typecho » Version: 0.9-13.12.6
    cpe:2.3:a:typecho:typecho:0.9-13.12.6
  • Typecho » Typecho » Version: 0.9-14.5.25
    cpe:2.3:a:typecho:typecho:0.9-14.5.25
  • Typecho » Typecho » Version: 1.0-14.10.10
    cpe:2.3:a:typecho:typecho:1.0-14.10.10
  • Typecho » Typecho » Version: 1.0-14.10.9
    cpe:2.3:a:typecho:typecho:1.0-14.10.9
  • Typecho » Typecho » Version: 1.1
    cpe:2.3:a:typecho:typecho:1.1
  • Typecho » Typecho » Version: 1.1-15.5.12
    cpe:2.3:a:typecho:typecho:1.1-15.5.12
  • Typecho » Typecho » Version: 1.1-17.10.24
    cpe:2.3:a:typecho:typecho:1.1-17.10.24
  • Typecho » Typecho » Version: 1.1-17.10.29
    cpe:2.3:a:typecho:typecho:1.1-17.10.29
  • Typecho » Typecho » Version: 1.1-17.10.30
    cpe:2.3:a:typecho:typecho:1.1-17.10.30
  • Typecho » Typecho » Version: 1.2.0
    cpe:2.3:a:typecho:typecho:1.2.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved