Unknown · Hexo-Theme-Anzhiyu · CVE-2024-25865
**Name of the Vulnerable Software and Affected Versions**
hexo-theme-anzhiyu version 1.6.12
**Description**
The issue is a Cross Site Scripting (XSS) vulnerability that allows remote attackers to execute arbitrary code via the algolia search function.
**Recommendations**
For hexo-theme-anzhiyu version 1.6.12, consider disabling the algolia search function until a patch is available.
Restrict access to the algolia search module to minimize the risk of exploitation.
Avoid using the algolia search function in the affected version until the issue is resolved.