Lucene search

Summernote Security Vulnerabilities

cve

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component.

5.4CVSS

5.8AI Score

0.001EPSS

2023-09-18 03:15 PM

cve

CVE-2024-37629

SummerNote 0.8.18 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.

6.1CVSS

6.2AI Score

0.0005EPSS

2024-06-12 06:15 PM