SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which inserts entity-decoded…
SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which inserts entity-decoded h1-h6 header textContent into the bookmark list via innerHTML without escaping. Attackers can store HTML-encoded payloads in editor headers that execute JavaScript when a victim opens the link modal and types # in the URL input.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- JiHong88
- Product
- suneditor
- CVSS v3.1
- 7.6 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
- Weakness
- CWE-79
- NVD status
- Received
Why it ranks 25 (Notable)
- CVSS v3.1 7.6 high
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.