GHSA-82jf-8f24-xq9m
hexo-theme-anzhiyu Cross-site Scripting vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | hexo-theme-anzhiyu | 1.6.12 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Cross Site Scripting (XSS) vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function.
References
External links from the advisory. They lead to third-party sites.