Lucene search
+L

5 matches found

Mend
Mend
•added 2026/05/14 6:45 a.m.•1 views

WS-2019-0283

Mavon-editor is vulnerable to Cross-Site Scripting XSS. The package fails to sanitize entered input, allowing attackers to execute arbitrary JavaScript in a victim's browser. All version are affected...

6.1CVSS6.5AI score
SaveExploits0References1
OSV
OSV
•added 2020/09/03 8:36 p.m.•17 views

GHSA-JFCC-RM7F-XGF8 Cross-Site Scripting in mavon-editor

All versions of mavon-editor are vulnerable to Cross-Site Scripting. The package fails to sanitize entered input, allowing attackers to execute arbitrary JavaScript in a victim's browser. Recommendation No fix is currently available. Consider using an alternative package until a fix is made...

6.5CVSS7.5AI score
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2020/09/03 8:36 p.m.•27 views

Cross-Site Scripting in mavon-editor

All versions of mavon-editor are vulnerable to Cross-Site Scripting. The package fails to sanitize entered input, allowing attackers to execute arbitrary JavaScript in a victim's browser. Recommendation No fix is currently available. Consider using an alternative package until a fix is made...

5.4AI score
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•1 views

PT-2020-21372

Name of the Vulnerable Software and Affected Versions mavon-editor versions all Description The issue concerns a failure to sanitize entered input, allowing attackers to execute arbitrary JavaScript in a victim's browser, thus enabling Cross-Site Scripting attacks. Recommendations For all version...

6.5CVSS6.4AI score
SaveExploits0References8
nodejs
nodejs
•added 2019/09/16 10:28 p.m.•24 views

Cross-Site Scripting

Overview All versions of mavon-editor are vulnerable to Cross-Site Scripting. The package fails to sanitize entered input, allowing attackers to execute arbitrary JavaScript in a victim's browser. Recommendation No fix is currently available. Consider using an alternative package until a fix is...

7.3AI score
SaveExploits0Affected Software1
Rows per page
Query Builder