@primecms/core (>=0.0.23, <=0.3.3-beta.9), @primecms/field-string (>=0.0.23, <=0.3.4-beta.1) +7 more potentially affected by CVE-2021-27524 via braft-editor (>=2.1.34, <=2.3.8)

braft-editor NPM version =2.1.34, =0.0.23, =0.0.23, =0.1.0, =0.9.4-rc.0, =0.1.0-beta, =0.4.11-beta.0, =0.4.26 Source cves: CVE-2021-27524 Source advisory: OSV:GHSA-JFRF-VV54-J2JG...

CVE-2021-27524

Cross Site Scripting XSS vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embed media feature...

CVE-2021-27524

CVE-2021-27524 describes a Cross‑Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, exploitable via the embed media feature. The NVD entry lists a CVSS v3.1 base score of 6.1 (Medium) with network access, low attack complexity, and user interaction required. The vulnerabilit...