Npm Vditor vulnerabilities

5 vulnerabilities

Known vulnerabilities in Npm Vditor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2021-4103b3logvditor+2
EPSS score
0.66%
Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34.6.1CVE-2021-32855b3logvditor+1
EPSS score
0.58%
Vditor is a browser-side Markdown editor. Versions prior to 3.8.7 are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. Version 3.8.7 contains a patch for this issue.6.6CVE-2022-0341b3logvditor+2
EPSS score
0.47%
Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12.6.1CVE-2022-0350b3logvditor+2
EPSS score
0.55%
Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13.6.1CVE-2024-34449b3logvditor+1
EPSS score
0.36%
Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true.