5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.0%
Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.
github.com/Heartway/simditor/blob/master/simditor.docx