https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T11:51:10.206602+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-hexo-cve-2021-25987 BREW-hexo-CVE-2021-25987 2026-10-12T11:51:10.284542+00:00

Affected: Homebrew: hexo

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.

 https://cve.radiocsirt.org/vuln/cnvd-2021-95952 cnvd-2021-95952 2026-10-12T11:51:10.284592+00:00 cnvd-2021-95952 https://cve.radiocsirt.org/vuln/euvd-2026-235986 EUVD-2026-235986 2026-10-12T11:51:10.284611+00:00 EUVD-2026-235986 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25987 fkie_cve-2021-25987 2026-10-12T11:51:10.284623+00:00

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-q54r-r9pr-w7qv GHSA-q54r-r9pr-w7qv — Hexo Vulnerable to XSS 2026-10-12T11:51:10.284645+00:00

Affected: npm: hexo

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.

 https://cve.radiocsirt.org/vuln/gsd-2021-25987 gsd-2021-25987 2026-10-12T11:51:10.284667+00:00 gsd-2021-25987