Summernote - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2024-06-12.

Products

• Summernote - 2 CVEs
• Rich Text Editor - 1 CVEs

Newest CVEs of Summernote

• CVE-2024-37629 - CVSS 6.1 (medium), 2024-06-12: SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.
• CVE-2024-29504 - CVSS 7.6 (high), 2024-04-10: Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview…
• CVE-2023-42371 - CVSS 5.4 (medium), 2023-09-18: Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script…