Xheditor

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xheditor records in CISA KEV

No Xheditor vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2018-13396 CVE-2018-18909 · GHSA-gcqp-fj85-rpxr

LOW 29

xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2018-11-03 No fix listed CWE-79