Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2017-16230 1 Typecho 1 Typecho 2025-04-20 N/A
In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit.
CVE-2020-21038 1 Typecho 1 Typecho 2025-01-29 6.1 Medium
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.
CVE-2018-18753 1 Typecho 1 Typecho 2024-11-21 N/A
Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF.