medium5.4
CVE-2022-0350
Cross-site Scripting in vditor
Impact
Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | vditor | < 3.8.13 | 3.8.13 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| B3log | Vditor | before 3.8.13 |