@icedesign/braft-editor-block (>=1.0.0 <=3.0.1), @primecms/core (>=0.0.23 <=0.3.3-beta.9) +21 more potentially affected by CVE-2021-27524 via braft-editor (>=1.8.10 <=2.3.8)

braft-editor NPM version =1.8.10, =1.0.0, =0.0.23, =0.0.23, =0.1.0, =0.1.0, =1.1.0, =0.2.3, =0.0.11, =0.0.1, =0.0.22, =0.0.39 and more Source cves: CVE-2021-27524 Source advisory: OSV:GHSA-JFRF-VV54-J2JG...

CVE-2021-27524

Cross Site Scripting XSS vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embed media feature...

CVE-2021-27524

CVE-2021-27524 describes a Cross‑Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, exploitable via the embed media feature. The NVD entry lists a CVSS v3.1 base score of 6.1 (Medium) with network access, low attack complexity, and user interaction required. The vulnerabilit...