← All advisories

Medium severity6.1NVD Advisory· Published Oct 23, 2019· Updated Jun 17, 2026

CVE-2019-17606

CVE-2019-17606

Description

The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
hexo-adminnpm	<= 2.3.0	—

Affected products

3

Hexo Admin Project/Hexo Admin
cpe:2.3:a:hexo-admin_project:hexo-admin:*:*:*:*:*:node.js:*:*
Range: <=2.3.0
hexo-admin/hexo-admin plugindescription
ghsa-coords
pkg:npm/hexo-admin
Range: <= 2.3.0

Patches

Vulnerability mechanics

References

9

github.com/jaredly/hexo-admin/commits/masternvdPatchThird Party Advisory
github.com/advisories/GHSA-g784-q3p3-26rmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-17606ghsaADVISORY
www.npmjs.com/advisoriesnvdThird Party Advisory
www.npmjs.com/advisories/1211nvdThird Party Advisory
github.com/418sec/hexo-admin/pull/2ghsaWEB
github.com/jaredly/hexo-admin/issues/185ghsaWEB
github.com/jaredly/hexo-admin/pull/203ghsaWEB
mega.nznvd

News mentions

0

No linked articles in our index yet.