Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47506
HistoryJun 13, 2024 - 5:30 a.m.

Cross Site Scripting(XSS)

2024-06-1305:30:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
summernote
cross site scripting
vulnerability
input validation
sanitization
malicious scripts
application
code mode

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

summernote is vulnerable to Cross Site Scripting (XSS). The vulnerability is due to insufficient input validation and sanitization of user-provided content, allowing malicious scripts to be executed within the context of the application when viewed in code mode.

CPENameOperatorVersion
summernotele0.8.20
summernotele0.8.20

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%