CVE-2018-19048

Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element

published May 13, 2019

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01537 · 74.7th percentile
Published
2019-05-13T13:13Z
EPSS history
Timeline
  • 13 MAY 13:13Z
    Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element
    cvelistv5