Vulnerabilities

TI-2024-26189 CVE-2024-39150 · GHSA-qwjr-hp4h-rmwf

vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.

LOW 26

vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00322 Published 2024-07-05 No fix listed

TI-2024-22784 CVE-2024-34449 · GHSA-m5jf-8crm-r65m

LOW 27

Vditor 3.10.3 allows XSS via an attribute of an A element.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00359 Published 2024-05-03 No fix listed CWE-79

TI-2021-12520 CVE-2021-32855 · GHSA-vfmp-9999-6wqj

MEDIUM 60

Vditor is a browser-side Markdown editor.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00584 Published 2023-02-20 Fixed in 3.8.7 CWE-79

TI-2022-00276 CVE-2022-0350 · GHSA-689x-x68p-fph3

LOW 25

Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00547 Published 2022-03-31 Fixed in 3.8.13 CWE-79

TI-2022-00267 CVE-2022-0341 · GHSA-pq37-4c4g-v38c

LOW 25

Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2022-03-14 Fixed in 3.8.12, 3.8.11 CWE-79

TI-2021-02982 CVE-2021-4103 · GHSA-cxm3-v4mv-6mh8

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00664 Published 2022-01-23 Fixed in 1.0.34, 3.8.11 CWE-79