Description
Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.
Remediation
References
https://github.com/Heartway/simditor/blob/master/simditor.docx
Related Vulnerabilities
CVE-2020-11079 Vulnerability in npm package dns-sync
CVE-2020-28472 Vulnerability in npm package @aws-sdk/shared-ini-file-loader
CVE-2022-25937 Vulnerability in npm package glance
CVE-2022-25167 Vulnerability in maven package org.apache.flume:flume-parent
CVE-2021-40146 Vulnerability in maven package org.apache.any23:apache-any23-core