Threats affecting pkg:github/vanessa219/vditor

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 0.4%	CVE-2024-34449vditor MediumEPSS 0.4%2024-05-03CVE Database V5CVE-2024-34449 Vditor version prior to 3.10.3 contains a cross-site scripting (XSS) vulnerability via an attribute of an anchor (A) element. The vendor recommends mitigating this issue by enabling the sanitize=true option. The vulnerability is fixed in version 3.10.3. EPSS 0.4%Vulnerability	CVE Database V5	2024-05-03

Page 1 of 1