Summernote

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Summernote records in CISA KEV

No Summernote vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Summernote 2 records HIGH Rich Text Editor 1 record MEDIUM

Records

1 record in Rich Text Editor · all components

TI-2023-22586 CVE-2023-42371 · GHSA-q8v8-p787-f2gx

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before…

MEDIUM 58

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00614 Published 2023-09-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0