Cross-site Scripting (XSS)

2018-02-0106:58:02

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

34.0%

JSON

Simditor is vulnerable to cross-site scripting (XSS) attacks. The application does not properly sanitize the TEXTAREA element, allowing a malicious user to inject and execute arbitrary Javascript.

CPENameOperatorVersion
simditorle2.3.5
simditorle2.3.5
simditoreq2.0.4

Name	Operator	Version
simditor	le	2.3.5
simditor	le	2.3.5
simditor	eq	2.0.4

References

github.com/Heartway/simditor/

github.com/Heartway/simditor/blob/master/simditor.docx

0.001 Low

EPSS

Percentile

34.0%

JSON

Related for VERACODE:5778