Lucene search
+L

24 matches found

Snyk
Snyk
•added 2025/10/21 7:37 a.m.•2 views

Malicious Package

Overview @wangeditoreditor/editor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/09 12:36 p.m.•8 views

Malicious code in @wangeditor_editor/editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7e992b391fd117aafc0f2ac03e69c68f62cbd639b2a71025b8680cc4a17a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/09 12:36 p.m.•9 views

EUVD-2025-33339

Malicious code in @wangeditoreditor/editor npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-28308

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.004EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:21 a.m.•19 views

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

5.4CVSS6.2AI score0.004EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2024/05/31 6:31 p.m.•71 views

wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function

There is a cross-site scripting XSS issue in wangEditor via the image upload function in version 4.7.11. This issue has been fixed in version 4.7.12...

5.7AI score0.00268EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2024/05/31 12:00 a.m.•10 views

wangEditor Security Vulnerability

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in wangEditor version 4.7.11, which stems from vulnerability to cross-site scripting XSS attacks...

6.1CVSS5.9AI score0.00256EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/31 12:00 a.m.•23 views

wangEditor Security Vulnerability

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in wangEditor version 4.7.11, which stems from vulnerability to cross-site scripting XSS attacks...

5.4CVSS5.9AI score0.00268EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/12/11 9:15 p.m.•9 views

CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

6.1CVSS6.2AI score0.01147EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/12/11 12:00 a.m.•12 views

PT-2023-31247 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.111 Description: A reflective cross-site scripting XSS issue was discovered in DedeCMS via the component select media post wangEditor.php. This allows for potential XSS attacks. Recommendations: For DedeCMS version 5.7.111...

6.1CVSS5.9AI score0.01147EPSS
SaveExploits1References7
OSV
OSV
•added 2023/02/27 4:15 p.m.•13 views

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

5.4CVSS6AI score0.004EPSS
SaveExploits1References1
NVD
NVD
•added 2023/02/27 4:15 p.m.•29 views

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

5.4CVSS5.4AI score0.004EPSS
SaveExploits1References1
Prion
Prion
•added 2023/02/27 4:15 p.m.•32 views

Cross site scripting

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

4.9CVSS5.4AI score0.004EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•14 views

wangEditor 跨站脚本漏洞

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in version v5 of wangEditor, which stems from a cross-site scripting XSS vulnerability...

5.4CVSS5.3AI score0.004EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/02/27 12:00 a.m.•18 views

PT-2023-19499 · Waneditor · Waneditor

Name of the Vulnerable Software and Affected Versions: WangEditor version 5 Description: A cross-site scripting XSS issue was found in WangEditor via the component /dist/index.js. Recommendations: For WangEditor version 5, update to a newer version that contains a fix for this issue...

5.4CVSS5.2AI score0.004EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/27 12:00 a.m.•2 views

CVE-2023-24251: Improper Neutralization of Input During Web Page Generation

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

5.4CVSS5.6AI score0.004EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/02/27 12:00 a.m.•12 views

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

5.4AI score0.004EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/02/27 12:00 a.m.•39 views

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

5.6AI score0.004EPSS
SaveExploits1References1
CVE
CVE
•added 2023/02/27 12:00 a.m.•68 views

CVE-2023-24251

CVE-2023-24251 affects WangEditor v5; an XSS vulnerability is exploitable via the /dist/index.js component. The NVD metrics describe a network-accessible issue with low impact (C/L, I/L) and user interaction required. Connected sources corroborate a cross-site scripting flaw in WangEditor v5 and ...

5.4CVSS5.3AI score0.004EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2021/05/02 12:00 a.m.•8 views

XSS vulnerability in wangEditor

wangEditor is a Web rich text editor . An XSS vulnerability exists in wangEditor, which can be exploited by attackers to obtain sensitive information such as user cookies...

5.8AI score
SaveExploits0
Rows per page
Query Builder