CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

24 matches found

Prion•added 2018/01/31 6:29 p.m.•16 views

Design/Logic Flaw

Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1...

4.3CVSS5.8AI score0.00689EPSS

Exploits1References1Affected Software1

NVD•added 2018/01/31 6:29 p.m.•14 views

CVE-2018-6464

Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1...

6.1CVSS5.9AI score0.00689EPSS

Exploits1References1

CVE•added 2018/01/31 6:0 p.m.•53 views

CVE-2018-6464

Summary : CVE-2018-6464 affects Simditor v2.3.11, where an attacker can trigger cross-site scripting (XSS) by crafting an SVG onload payload inside a TEXTAREA element, demonstrated with Firefox 54.0.1. The root cause is not explicitly detailed beyond the use of an SVG/onload payload in a TEXTAREA...

6.1CVSS5.8AI score0.00689EPSS

Exploits1References1Affected Software1