Lucene search

K

Simditor Security Vulnerabilities

cve
cve

CVE-2018-19048

Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

6.1CVSS

5.9AI Score

0.001EPSS

2019-05-13 02:29 PM
26
cve
cve

CVE-2018-6464

Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.

6.1CVSS

5.8AI Score

0.001EPSS

2022-10-03 04:21 PM
28