← Back

Simditor

simditor

Vendor: Mycolorway • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-19048
1Mycolorway
1Simditor
Nov 21, 2024
May 13, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.
CVE-2018-6464
1Mycolorway
1Simditor
Jun 17, 2026
Jan 31, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.