CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

Cross site scripting

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

CVE-2023-42371

CVE-2023-42371 maps to a Cross-Site Scripting vulnerability in Summernote Rich Text Editor up to v0.8.18. Reported weakness allows a remote attacker to execute arbitrary code via a crafted script inserted through the editor’s insert link function. The issue is described consistently across multip...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

CVE-2023-42371: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

@activix/summernote-image-attributes (1.0.0), @beratkara/summernote-words-length (1.0.0) +133 more potentially affected by CVE-2023-42371 via summernote (>=0.5.9, <=0.8.20)

summernote NPM version =0.5.9, =0.0.3, =0.0.1, =1.0.2, =1.0.0, =2.1.4140, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =1.0.12, =2.0.0 and more Source cves: CVE-2023-42371 Source advisory: MEND:CVE-2023-42371...

PT-2023-28324

Name of the Vulnerable Software and Affected Versions Summernote Rich Text Editor versions 0.8.18 and before Description The issue allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component. This enables the attacker to perform...

Summernote Rich Text Editor Cross-Site Scripting Vulnerability

Summernote Rich Text Editor is a rich text editor from Summernote. A cross-site scripting vulnerability exists in Summernote Rich Text Editor v.0.8.18 and prior versions, which originates from a vulnerability that could allow a remote attacker to execute arbitrary code via a crafted script in the...

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

Cross-Site Scripting (XSS)

summernote is vulnerable to cross-site scripting XSS attacks. The library does not sanitise user input when attaching a link to an image, allowing a malicious user to inject and execute arbitrary code on their own browser...

mondhygieniste.com XSS vulnerability

Open Bug Bounty ID: OBB-83397 Description| Value ---|--- Affected Website:| mondhygieniste.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...