GHSA-CXM3-V4MV-6MH8 vditor Vulnerable to Cross-site Scripting in SVG events

vditor does not filter user input in SVG events, leading to XSS PoC html...

PT-2022-11356

Name of the Vulnerable Software and Affected Versions vditor versions prior to 1.0.34 Description The issue is related to Cross-site Scripting XSS - Stored, where vditor does not filter user input in SVG events, leading to XSS. This can be exploited using malicious SVG code, such as an animate ta...