CVE-2024-34449
May 3, 2024, 4:15 p.m.
Tags
Product(s) Impacted
Vditor
- 3.10.3
Description
Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true.
Weaknesses
Date
Published: May 3, 2024, 4:15 p.m.
Last Modified: May 3, 2024, 4:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org