Lucene search

GitHub Advisory DatabaseGHSA-CC55-MVQC-G9MG

HistoryJun 12, 2024 - 6:30 p.m.

SummerNote Cross Site Scripting Vulnerability

2024-06-1218:30:41

CWE-79

GitHub Advisory Database

github.com

summernote

cross site scripting

xss

code view function

vulnerability

software

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

SummerNote 0.8.18 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.

Affected configurations

Vulners

Node

summernoterich_text_editorRange≤0.8.20

CPENameOperatorVersion
summernotele0.8.20

CPE	Name	Operator	Version
	summernote	le	0.8.20

github.com/advisories/GHSA-cc55-mvqc-g9mg

github.com/summernote/summernote/issues/4642

grumpz.net/cve-2024-37629-simple-xss-payload-exploits-0day-vulnerability-in-10000-web-apps

nvd.nist.gov/vuln/detail/CVE-2024-37629