CVE-2021-4103

Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 1.0.34...

@yeepay/lowcode-engine (>=1.0.0-beta.1, <=2.3.12), @yeepay/lowcode-markdown (>=2.2.0-beta.0, <=2.6.4) potentially affected by CVE-2021-4103 via vditor (3.3.9)

vditor NPM version 3.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on vditor and may be impacted: - @yeepay/lowcode-engine =1.0.0-beta.1, =2.2.0-beta.0, =2.6.4 Source cves: CVE-2021-4103 Source advisory: OSV:GHSA-CXM3-V4MV-6MH8...

CVE-2021-4103

creationtimestamp| type| source ---|---|--- 2022-01-23 07:15:18+00:00| seen| https://t.me/cibsecurity/36092 2022-01-28 22:04:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cxm3-v4mv-6mh8...

CVE-2021-4103

Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 1.0.34...

CVE-2021-4103

CVE-2021-4103 is an XSS in vanessa219/vditor prior to 1.0.34 (stored XSS). Multiple sources (NVD, OSV, Red Hat, CNVD, GHSA) confirm cross-site scripting risk in the vditor editor. Affected component: vditor (JavaScript library). Impact: execution of arbitrary client-side scripts in the context of...