| Package | Affected versions | Patched versions |
|---|---|---|
| simditor | = 2.3.11 | |
| simditor | ≤ 2.3.11 |
Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free