Description
Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | simditor | <= 2.3.11 | — | GHSA-p9wj-wrrm-84m5 |
Medium · 6.1
CVE-2018-6464
EUVD-2022-4734GHSA-p9wj-wrrm-84m5
Simditor XSS Vulnerability
Published Jan 31, 2018 · Updated Sep 17, 2024 · Assigned by mitre