Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-M5JF-8CRM-R65M
HistoryMay 03, 2024 - 6:30 p.m.

Vditor allows Cross-site Scripting via an attribute of an `A` element

2024-05-0318:30:37
Google
osv.dev
7
vditor
3.10.3
xss
vulnerability
attribute
element
sanitize=true
software

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.0%

JSON

Vditor 3.10.3 allows XSS via an attribute of an A element.

NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true.

Related

nvd 1
veracode 1
cve 1
cvelist 1
vulnrichment 1
github 1
nvd
nvd
CVE-2024-34449
2024-05-03 16:15:11
veracode
veracode
Cross Site Scripting (XSS)
2024-05-06 06:56:44
cve
cve
CVE-2024-34449
2024-05-03 16:15:11
cvelist
cvelist
CVE-2024-34449
2024-05-03 00:00:00
vulnrichment
vulnrichment
CVE-2024-34449
2024-05-03 00:00:00
github
github
Vditor allows Cross-site Scripting via an attribute of an `A` element
2024-05-03 18:30:37

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for OSV:GHSA-M5JF-8CRM-R65M
nvd1veracode1cve1cvelist1vulnrichment1github1