Skip to main content
cve.nowby Sazabi
← npm
npmPackage

vditor

5 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 4 medium
Registry
npm

Advisories 5

  • Vditor 3.10.3 allows XSS via an attribute of an A element.

    Affected: versions 3.10.3.

  • CVE-2021-32855Medium 6.1

    vditor vulnerable to Cross-site Scripting

    Affected: fixed in 3.8.7.

  • CVE-2022-0350Medium 6.1

    Cross-site Scripting (XSS) - Stored in vanessa219/vditor

    Affected: fixed in 3.8.13.

  • CVE-2022-0341Medium 6.6

    Cross-site Scripting (XSS) - Stored in vanessa219/vditor

    Affected: fixed in 3.8.11.

  • CVE-2021-4103Medium 6.8

    Cross-site Scripting (XSS) - Stored in vanessa219/vditor

    Affected: fixed in 3.8.11.