Skip to content
OpenAdvisories

Package · npm

summernote

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2024-37629

    SummerNote Cross Site Scripting Vulnerability

    SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.

    summernote npm
  • High 7.6
    CVE-2024-29504

    Summernote vulnerable to cross-site scripting

    Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter.

    summernote npm