Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-34449
6.1
MEDIUMCVSS v3
Published
May 3, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true.
Vanessa219/vditor
GitHub♏ 一款浏览器端的 Markdown 编辑器，支持所见即所得（富文本）、即时渲染（类似 Typora）和分屏预览模式。An In-browser Markdown editor, support WYSIWYG (Rich Text), Instant Rendering (Typora-like) and Split View modes.
GitHub♏ 一款浏览器端的 Markdown 编辑器，支持所见即所得（富文本）、即时渲染（类似 Typora）和分屏预览模式。An In-browser Markdown editor, support WYSIWYG (Rich Text), Instant Rendering (Typora-like) and Split View modes.= 3.10.3NVD