@bidvine/react-summernote (2.0.2), @uday_test/wm_codegen_angular_app (0.0.0) +16 more potentially affected by CVE-2024-29504 via summernote (>=0.5.9, <=0.8.18)

summernote NPM version =0.5.9, =1.0.2, =4.8.14, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =4.9.23-SNAPSHOT-1643111141537, =5.0.6, =1.0.0, =1.0.0, =1.0.0, =1.0.4 - wavemaker-ng-runtime-new 0.0.0 and more Source cves: CVE-2024-29504 Source...

CVE-2024-29504

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

CVE-2024-29504

A Cross-Site Scripting (XSS) vulnerability exists in Summernote version 0.8.18 and before . The flaw stems from improper sanitization of the codeview parameter, which allows a remote attacker to execute arbitrary JavaScript code via a crafted payload. This vulnerability also impacts several packa...