TI-2024-00597 CVE-2024-0647 · GHSA-qx87-ch68-vxx2
Sparksuite SimpleMDE iFrame cross site scripting
Priority MEDIUM 60
A vulnerability, which was classified as problematic, was found in Sparksuite SimpleMDE up to 1.11.2.
Sparksuite
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Sparksuite records in CISA KEVNo Sparksuite vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Simplemde · all components
TI-2018-13508 CVE-2018-19057 · GHSA-wg85-p6j7-gp3w
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via…
Priority LOW 29
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.