GitHub Advisoryadvisory · npm

GHSA-cc55-mvqc-g9mg SummerNote Cross Site Scripting Vulnerability

MEDIUM Published 2024-06-12 Modified 2025-03-21 Official page ↗

Aliases: CVE-2024-37629
Ecosystem: npm
Packages: summernote
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses: CWE-79
Reviewed: 2024-06-12

Affected packages

• npm summernote: <= 0.8.20 (no fix yet)

Description

SummerNote 0.8.18 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.

Related

Alias · CVE (1)

CVE-2024-37629 SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function. vulnerability

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References