{"action":"Upgrade vditor to 3.8.11 or later.","affected":[{"fixed":"3.8.11","introduced":"0"}],"component":"vditor","cve_ids":["CVE-2021-4103"],"ecosystem":"npm","epss":0.00664,"exploited":false,"fixed_versions":["3.8.11"],"ghsa_id":"GHSA-cxm3-v4mv-6mh8","id":"tcs_01M5KFKY5BV8779CQ052CK3HV4","modified_at":"2023-11-08T04:06:50.115961Z","published_at":"2022-01-28T22:04:11Z","references":["https://osv.dev/vulnerability/GHSA-cxm3-v4mv-6mh8","https://nvd.nist.gov/vuln/detail/CVE-2021-4103","https://github.com/Vanessa219/vditor/issues/1133","https://github.com/vanessa219/vditor/commit/8d4d0889dd72b2f839e93a49db3da3a370416c7d","https://github.com/vanessa219/vditor","https://huntr.dev/bounties/67b980af-7357-4879-9448-a926c6474225"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-cxm3-v4mv-6mh8","url":"https://osv.dev/vulnerability/GHSA-cxm3-v4mv-6mh8"}],"summary":"vditor Vulnerable to Cross-site Scripting in SVG events"}