Summernote vulnerable to cross-site scripting

ALTO 7.6CVE-2024-29504 · GHSA-4wh3-3wf2-39m9 · Published 10/04/2024 · updated 17/06/2026

In breve

CVE-2024-29504 è una vulnerabilità ALTO (CVSS 7.6) che riguarda summernote (summernote), summernote.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.66%, superiore al 51.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
summernote summernote	`≤ 0.8.18`	No fix yet
summernote npm	`≤ 0.8.18`	No fix yet

Description

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter.

NVD description

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter.

References

nvd.nist.gov/vuln/detail/CVE-2024-29504 · ADVISORY
summernote/summernote#3782 · WEB
gist.github.com/phoenix118go/a9192281efcfa518daa709ab7638712b · WEB
summernote/summernote · PACKAGE

Altre vulnerabilità di summernote

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free