← All advisories

Moderate severityNVD Advisory· Published Jan 23, 2022· Updated Aug 3, 2024

Cross-site Scripting (XSS) - Stored in vanessa219/vditor

CVE-2021-4103

Description

Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
vditornpm	< 3.8.11	3.8.11

Affected products

2

ghsa-coords
pkg:npm/vditor
Range: < 3.8.11
vanessa219/vanessa219/vditorv5
Range: unspecified

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

github.com/advisories/GHSA-cxm3-v4mv-6mh8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-4103ghsaADVISORY
github.com/Vanessa219/vditor/issues/1133ghsaWEB
github.com/vanessa219/vditor/commit/8d4d0889dd72b2f839e93a49db3da3a370416c7dghsax_refsource_MISCWEB
huntr.dev/bounties/67b980af-7357-4879-9448-a926c6474225ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.