CVE-2024-37629

SummerNote v0.9.1 is vulnerable to Cross Site Scripting XSS via the Code View Function...

Cross Site Scripting (XSS)

Summernote is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitization of the codeview parameter, which can result in the the execution of arbitrary JavaScript code via a crafted payload...

Summernote vulnerable to cross-site scripting

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

@bidvine/react-summernote (2.0.2), @uday_test/wm_codegen_angular_app (0.0.0) +16 more potentially affected by CVE-2024-29504 via summernote (>=0.5.9, <=0.8.18)

summernote NPM version =0.5.9, =1.0.2, =4.8.14, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =5.0.6, =1.0.0, =1.0.0, =1.0.0, =1.0.4 - wavemaker-ng-runtime-new 0.0.0 and more Source cves: CVE-2024-29504 Source...

GHSA-4WH3-3WF2-39M9 Summernote vulnerable to cross-site scripting

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

CVE-2024-29504

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

PT-2024-22929 · Unknown · Summernote

Name of the Vulnerable Software and Affected Versions: Summernote versions 0.8.18 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the codeview parameter. This enables the attacker to perform actions such as executing arbitrary code on...

CVE-2024-29504

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

CVE-2024-29504

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

CVE-2024-29504

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

CVE-2024-29504

A Cross-Site Scripting (XSS) vulnerability exists in Summernote version 0.8.18 and before . The flaw stems from improper sanitization of the codeview parameter, which allows a remote attacker to execute arbitrary JavaScript code via a crafted payload. This vulnerability also impacts several packa...

CVE-2024-29504: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

Summernote 安全漏洞

Summernote is a super simple WYSIWYG editor from the Summernote open source. A security vulnerability exists in Summernote v.0.8.18 and earlier versions, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via a crafted...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

Cross site scripting

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

Summernote Rich Text Editor Cross-Site Scripting Vulnerability

Summernote Rich Text Editor is a rich text editor from Summernote. A cross-site scripting vulnerability exists in Summernote Rich Text Editor v.0.8.18 and prior versions, which originates from a vulnerability that could allow a remote attacker to execute arbitrary code via a crafted script in the...

CVE-2023-42371: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...