Mycolorway Simditor
2 CVEs affecting Mycolorway Simditor. Latest disclosed: 2019-05-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19048 | Medium | 6.1 | 2019-05-13 | Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element. |
CVE-2018-6464 | Medium | 6.1 | 2018-01-31 | Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1. |