Description
Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 0.8.18
References
Could your website be exposed too?
SmartScanner can check your website for Summernote vulnerable to cross-site scripting and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting - CVE-2024-9148
- SummerNote Cross Site Scripting Vulnerability - CVE-2024-37629
- Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section - CVE-2024-47819
- Dash apps vulnerable to Cross-site Scripting - CVE-2024-21485
You might also like:
See something that needs correcting? Let us knowUpdated April 12, 2024