Cross Site Scripting (XSS)

Summernote is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitization of the codeview parameter, which can result in the the execution of arbitrary JavaScript code via a crafted payload...