Search vulnerabilities

Results 2

Export CSV
CVE-2018-6464

Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-19048

Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Products