PT-2018-17561
CVE-2018-6464
·
تاريخ النشر
2018-01-31
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Simditor version 2.3.11
Description
The issue allows for XSS via crafted use of
svg/onload=alert in a TEXTAREA element. This has been demonstrated using Firefox 54.0.1.Recommendations
For Simditor version 2.3.11, consider disabling the use of SVG elements in TEXTAREA fields until a patch is available. Restrict access to the TEXTAREA element to minimize the risk of exploitation. Avoid using the
onload event in SVG elements within the TEXTAREA element until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾