CVE-2019-17606
The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.
Published: 2019-10-23 · CVSS: Unscored
The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7