cve.bz

mycolorway simditor vulnerabilities, newest first

Filter
  1. 6.1CVE-2018-19048EPSS 1.5%

    Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

  2. 6.1CVE-2018-6464EPSS 0.7%

    Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.