Cross Site Scripting

xdsoft.net is vulnerable to Cross Site Scripting vulnerability. The vulnerability is due to improper sanitization of user input in the rich text editor component. This can be exploited by the attacker by injecting malicious input to execute Javascript on client side...

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created JPG file...

Enable Media Replace < 4.1.3 - Author+ PHP Object Injection

Description The plugin unserializes user input via the Remove Background feature, which could allow Author+ users to perform PHP Object Injection when a suitable gadget is present on the blog Step 1: Add the following code to the end of the file located at...

The vulnerability in component IW44Image.cpp of the viewer library for creating and editing DjVu files allows a perpetrator to cause a service failure.

The vulnerability of component IW44Image.cpp in the viewer, editor, and DjVu-file creation library from DjVuLibre is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

GHSA-95XR-CQ6H-VWR3 Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

Jodit Editor Cross-Site Scripting Vulnerability

Jodit Editor is an excellent WYSIWYG editor written in pure TypeScript by Valeriy Personal Developers. A cross-site scripting vulnerability exists in Jodit Editor version v.4.0.0-beta.86, which originates from a vulnerability that could allow a remote attacker to gain access to sensitive...

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

Foxit PDF Editor for Mac < 11.1.5 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.1.5. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the JavaScript engine of Foxit...

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

CVE-2023-42399

CVE-2023-42399 concerns the Jodit Editor (xdsoft.net) v4.0.0-beta.86, where a Cross‑Site Scripting flaw stems from improper sanitization in the rich text editor component. The vulnerability can allow a remote attacker to obtain sensitive information via the editor. Some connected sources (includi...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

Cross site scripting

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

Summernote Rich Text Editor Cross-Site Scripting Vulnerability

Summernote Rich Text Editor is a rich text editor from Summernote. A cross-site scripting vulnerability exists in Summernote Rich Text Editor v.0.8.18 and prior versions, which originates from a vulnerability that could allow a remote attacker to execute arbitrary code via a crafted script in the...

CVE-2023-42371

CVE-2023-42371 maps to a Cross-Site Scripting vulnerability in Summernote Rich Text Editor up to v0.8.18. Reported weakness allows a remote attacker to execute arbitrary code via a crafted script inserted through the editor’s insert link function. The issue is described consistently across multip...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...