Typecho vulnerabilities

Products

• Typecho 18

Newest

• typecho A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute... CVE-2024-46494 5.4 MediumApril 7, 2025
• typecho Clickjacking vulnerability in typecho v1.2.1. CVE-2024-57369 6.4 MediumJanuary 17, 2025
• typecho A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute... CVE-2024-35540 Public exploit 9.0 CriticalAugust 20, 2024
• typecho, typecho cms +1 more Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting... CVE-2024-35539 Public exploit 6.5 MediumAugust 19, 2024
• typecho Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows... CVE-2024-35538 Public exploit 5.3 MediumAugust 19, 2024
• typecho Typecho manage-users.php information disclosure CVE-2023-6615 3.5 LowDecember 8, 2023
• typecho Typecho Page manage-pages.php backdoor CVE-2023-6614 2.7 LowDecember 8, 2023
• typecho Typecho Logo options-theme.php cross site scripting CVE-2023-6613 2.4 LowDecember 8, 2023
• typecho Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the... CVE-2023-49967 7.5 HighDecember 7, 2023
• typecho A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code... CVE-2023-36299 8.8 HighAugust 3, 2023
• typecho Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php. CVE-2020-21038 6.1 MediumMay 8, 2023
• typecho A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute... CVE-2023-30184 5.4 MediumMay 4, 2023
• typecho Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute... CVE-2023-27711 4.8 MediumMarch 16, 2023
• typecho Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute... CVE-2023-27131 4.8 MediumMarch 16, 2023
• typecho Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute... CVE-2023-27130 4.8 MediumMarch 16, 2023
• typecho typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2023-24114 9.8 CriticalFebruary 22, 2023
• typecho Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data,... CVE-2018-18753 9.8 CriticalOctober 28, 2018
• typecho In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a... CVE-2017-16230 5.4 MediumOctober 30, 2017