Description
Simditor v2.3.11 allows XSS via crafted use of svg/onload=alert in a TEXTAREA element, as demonstrated by Firefox 54.0.1.
Remediation
References
https://github.com/Heartway/simditor/blob/master/simditor.docx
Related Vulnerabilities
CVE-2022-37223 Vulnerability in maven package com.jflyfox:jflyfox_jfinal
CVE-2022-2079 Vulnerability in npm package nocodb
CVE-2023-38695 Vulnerability in npm package @simonsmith/cypress-image-snapshot
CVE-2019-1003030 Vulnerability in maven package org.jenkins-ci.plugins.workflow:workflow-cps
CVE-2021-23337 Vulnerability in maven package org.webjars.npm:lodash.template