Medium · 6.1 CVE-2024-37629 EUVD-2024-2017GHSA-cc55-mvqc-g9mg

SummerNote Cross Site Scripting Vulnerability

Published Jun 12, 2024 · Updated Oct 7, 2025 · Assigned by mitre

Package: summernote Ecosystem: npm

Description

SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
npm	summernote	<= 0.8.20	—	GHSA-cc55-mvqc-g9mg

Advisories 1

WID-SEC-2025-0504 HCL BigFix WebUI Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 6, 2025

References