Lucene search
+L

8 matches found

Cvelist
Cvelist
•added 2025/03/03 12:00 a.m.•29 views

CVE-2024-53387

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...

0.00623EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/03 12:00 a.m.•73 views

CVE-2024-53387

A DOM Clobbering vulnerability exists in umeditor v1.2.3 , a rich text editor developed by the Baidu FEX team. This flaw allows an attacker to execute arbitrary code by supplying a crafted HTML element to the application. The vulnerability is categorized as Improper Neutralization of Input During...

8.8CVSS7.6AI score0.00623EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2025/03/03 12:00 a.m.•16 views

CVE-2024-53388

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

8.8CVSS6.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•6 views

PT-2025-9516

Name of the Vulnerable Software and Affected Versions mavo version 0.3.2 Description A DOM Clobbering issue allows attackers to execute arbitrary code by supplying a crafted HTML element. Recommendations For mavo version 0.3.2, at the moment, there is no information about a newer version that...

10CVSS0.00623EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
•added 2025/03/03 12:00 a.m.•8 views

CVE-2024-53387

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...

7.2AI score0.00623EPSS
SaveExploits1References1
NVD
NVD
•added 2020/03/10 5:15 p.m.•29 views

CVE-2020-9440

A cross-site scripting XSS vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor...

6.1CVSS5.9AI score0.0131EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/03/10 5:15 p.m.•33 views

CVE-2020-9440

A cross-site scripting XSS vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor...

6.1CVSS6.9AI score0.0131EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/03/10 4:57 p.m.•42 views

CVE-2020-9440

A cross-site scripting XSS vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor...

5.9AI score0.0131EPSS
SaveExploits0References4
Rows per page
Query Builder