Skip to content
OpenAdvisories

Package · npm

simditor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-19048

    Cross-Site Scripting in simditor

    Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

    simditor npm
  • Medium 6.1
    CVE-2018-6464

    Simditor XSS Vulnerability

    Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.

    simditor npm