Lucene search
+L

1 matches found

OSV
OSV
added 2019/05/14 4:01 a.m.5 views

GHSA-8V67-X8Q5-3X3G Cross-Site Scripting in simditor

Versions of simditor prior to 2.3.22 are vulnerable to Cross-Site Scripting. The package does not sanitize user input that is rendered with innerHTML, allowing attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 2.3.22 or later...

6.1CVSS6.6AI score0.01649EPSS
SaveExploits1References7
Rows per page
Query Builder