Lucene search
Veracode Vulnerability DatabaseVERACODE:47359HistoryJun 05, 2024 - 6:23 a.m.
Cross Site Scripting (XSS)
2024-06-0506:23:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
cross site scripting
input sanitization
browser
@wangeditor/editor is vulnerable to Cross-site scripting (XSS). The vulnerability is due to missing input sanitization within the image upload function, which allows an attacker to execute arbitrary JavaScript in the browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @wangeditor/editor | le | 5.0.0 | |
| @wangeditor/editor | le | 5.0.0 |
Related
cve
cve
CVE-2022-25037
2024-05-31 16:15:09
nvd
nvd
CVE-2022-25037
2024-05-31 16:15:09
github
github
cvelist
cvelist
CVE-2022-25037
1976-01-01 00:00:00
