CVE-2021-4103
1 advisory.
npm/vditor CVE-2021-4103: medium 5.4
vditor Vulnerable to Cross-site Scripting in SVG events
Action: Upgrade vditor to 3.8.11 or later.
npm i vditor@3.8.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.8.11 | - |
Fixed versions
| 3.8.11 |
Sources
- osv: GHSA-cxm3-v4mv-6mh8
- https://nvd.nist.gov/vuln/detail/CVE-2021-4103
- https://github.com/Vanessa219/vditor/issues/1133
- https://github.com/vanessa219/vditor/commit/8d4d0889dd72b2f839e93a49db3da3a370416c7d
- https://github.com/vanessa219/vditor
- https://huntr.dev/bounties/67b980af-7357-4879-9448-a926c6474225
CVE-2021-4103 · published · modified · JSON