31 matches found
CVE-2023-24251
WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...
PT-2023-19499 · Waneditor · Waneditor
Name of the Vulnerable Software and Affected Versions: WangEditor version 5 Description: A cross-site scripting XSS issue was found in WangEditor via the component /dist/index.js. Recommendations: For WangEditor version 5, update to a newer version that contains a fix for this issue...
CVE-2023-24251: Improper Neutralization of Input During Web Page Generation
WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...
CVE-2023-24251
CVE-2023-24251 affects WangEditor v5; an XSS vulnerability is exploitable via the /dist/index.js component. The NVD metrics describe a network-accessible issue with low impact (C/L, I/L) and user interaction required. Connected sources corroborate a cross-site scripting flaw in WangEditor v5 and ...
XSS vulnerability in wangEditor
wangEditor is a Web rich text editor . An XSS vulnerability exists in wangEditor, which can be exploited by attackers to obtain sensitive information such as user cookies...
Cross-Site Scripting in wangeditor
All versions of wangeditor are vulnerable to Cross-Site Scripting. The package fails to properly encode output, allowing arbitrary JavaScript to be inserted in links and executed by browsers. Recommendation No fix is currently available. Consider using an alternative module until a fix is made...
360shitu (0.1.0), @7revor/item-schema-sdk (0.0.0) +945 more potentially affected by unknown CVE via wangeditor (>=2.1.23, <=4.7.15)
wangeditor NPM version =2.1.23, =1.0.27, =1.0.11, =3.1.3, =1.0.8, =0.1.8, =3.4.0-cg.1, =1.0.0, =0.0.22, =0.0.4-alpha.0, =0.0.1, =0.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G7MW-5CQ6-FV82...
360shitu (0.1.0), @7revor/item-schema-sdk (0.0.0) +945 more potentially affected by unknown CVE via wangeditor (>=2.1.23, <=4.7.15)
wangeditor NPM version =2.1.23, =1.0.27, =1.0.11, =3.1.3, =1.0.8, =0.1.8, =3.4.0-cg.1, =1.0.0, =0.0.22, =0.0.4-alpha.0, =0.0.1, =0.0.4 and more Source cves: unknown CVE Source advisory: GHSA-G7MW-5CQ6-FV82...
PT-2020-21300
Name of the Vulnerable Software and Affected Versions wangeditor versions affected versions not specified Description The issue concerns a failure to properly encode output, allowing arbitrary JavaScript to be inserted in links and executed by browsers, which can lead to Cross-Site Scripting...
Cross-Site Scripting
Overview All versions of wangeditor are vulnerable to Cross-Site Scripting. The package fails to properly encode output, allowing arbitrary JavaScript to be inserted in links and executed by browsers. Recommendation No fix is currently available. Consider using an alternative module until a fix i...
