Summernote
by Summernote
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-29504 | Hig | 0.49 | 7.6 | 0.01 | Apr 10, 2024 | Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter. | ||
| CVE-2023-42371 | Med | 0.35 | 5.4 | 0.01 | Sep 18, 2023 | Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component. | ||
| CVE-2024-37629 | Med | 0.33 | 6.1 | 0.00 | Jun 12, 2024 | SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function. |
- risk 0.49cvss 7.6epss 0.01
Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter.
- risk 0.35cvss 5.4epss 0.01
Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component.
- risk 0.33cvss 6.1epss 0.00
SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.