Description
SummerNote 0.8.18 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 0.8.20
References
Could your website be exposed too?
SmartScanner can check your website for SummerNote Cross Site Scripting Vulnerability and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Cross-site scripting vulnerability in TinyMCE plugins - CVE-2024-21910
- Cross-site scripting vulnerability in TinyMCE - CVE-2024-21908
- Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability - CVE-2024-43407
- Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes - CVE-2024-6485
You might also like:
See something that needs correcting? Let us knowUpdated June 12, 2024


