Mycolorway

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Mycolorway records in CISA KEV

No Mycolorway vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2018-13502 CVE-2018-19048 · GHSA-8v67-x8q5-3x3g

LOW 30

Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01537 Published 2019-05-13 Fixed in 2.3.22 CWE-79

TI-2018-04750 CVE-2018-6464 · GHSA-p9wj-wrrm-84m5

LOW 28

Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00685 Published 2018-01-31 No fix listed CWE-79