Sparksuite

sparksuite

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Simplemde

simplemde

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-0647 1Sparksuite 1Simplemde Jun 17, 2026 Jan 17, 2024 N/A· v4 6.1 MEDIUM· v3 5.0 MEDIUM· v2 A vulnerability, which was classified as problematic, was found in Sparksuite SimpleMDE up to 1.11.2. This affects an unknown part of the component iFrame Handler. The manipulation leads to cross site scripting. It is po...Show more A vulnerability, which was classified as problematic, was found in Sparksuite SimpleMDE up to 1.11.2. This affects an unknown part of the component iFrame Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251373 was assigned to this vulnerability.Show less
CVE-2018-19057 1Sparksuite 1Simplemde Nov 21, 2024 Nov 7, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-0647

1Sparksuite

1Simplemde

Jun 17, 2026

Jan 17, 2024

N/A· v4

6.1 MEDIUM· v3

5.0 MEDIUM· v2

A vulnerability, which was classified as problematic, was found in Sparksuite SimpleMDE up to 1.11.2. This affects an unknown part of the component iFrame Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251373 was assigned to this vulnerability.Show less

CVE-2018-19057

1Sparksuite

1Simplemde

Nov 21, 2024

Nov 7, 2018

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.