summernote records
3 published records for vendor summernote.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2024-29504No exploit | Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payloasummernote · summernote · CWE-79 | High7.6 | — | 0.7% | Apr 10, 2024 |
24Monitor | CVE-2024-37629No exploit | SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.summernote · summernote · CWE-79 | Medium6.1 | — | 0.5% | Jun 12, 2024 |
21Monitor | CVE-2023-42371No exploit | Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code viasummernote · rich text editor · CWE-79 | Medium5.4 | — | 0.6% | Sep 18, 2023 |
- CVE-2024-2950430Monitor
Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payloa
HighCVSS 7.6No exploitEPSS 1%summernote · summernoteApr 10, 2024
- CVE-2024-3762924Monitor
SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.
MediumCVSS 6.1No exploitEPSS 0%summernote · summernoteJun 12, 2024
- CVE-2023-4237121Monitor
Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via
MediumCVSS 5.4No exploitEPSS 1%summernote · rich text editorSep 18, 2023