En resumen
- CVE-2018-13339 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a angular redactor (angular redactor project), angular-redactor.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.94%, mayor que el 61.1% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a related issue to CVE-2018-7035.
NVD description
Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a related issue to CVE-2018-7035.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free