CVE-2024-0647

Name of the Vulnerable Software and Affected Versions Sparksuite SimpleMDE versions up to 1.11.2

Description A problematic vulnerability was found in Sparksuite SimpleMDE, affecting an unknown part of the component iFrame Handler. The manipulation leads to cross-site scripting and can be initiated remotely.

Recommendations For versions up to 1.11.2, update to a version later than 1.11.2 to resolve the issue. As a temporary workaround, consider restricting access to the iFrame Handler component until a patch is available.