← Back

Summernote

summernote

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Summernote
summernote
2 CVEs
Rich Text Editor
rich_text_editor
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-37629
1Summernote
1Summernote
Jun 17, 2026
Jun 12, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.
CVE-2024-29504
1Summernote
1Summernote
Jun 17, 2026
Apr 10, 2024
N/A· v4
7.6 HIGH· v3
N/A· v2
Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter.
CVE-2023-42371
1Summernote
1Rich Text Editor
Jun 17, 2026
Sep 18, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component.