mycolorway/simditor

Releases63

Frequency1 month 1 day

Last Releasealmost 7 years ago

Stars5.01K

An Easy and Fast WYSIWYG Editor

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2018-19048NVD↗	<= 2.3.21, < 2.3.22	May 13, 2019Monday, 13 May 2019, 14:29	—	4.3 MEDIUM
Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.
CVE-2018-6464NVD↗	= 2.3.11, <= 2.3.11	Jan 31, 2018Wednesday, 31 January 2018, 18:29	6.1 MEDIUM	4.3 MEDIUM
Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.