Vulnerability Details CVE-2019-1010113
Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting (XSS). The impact is: An attacker might be able to inject arbitrary html and script code into the web site. The component is: jQuery plug-in. The attack vector is: the victim must open a crafted href attribute of a link (A) element.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.2%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2019-1010113
-
cpe:2.3:a:premiumsoftware:cleditor:1.0
-
cpe:2.3:a:premiumsoftware:cleditor:1.1
-
cpe:2.3:a:premiumsoftware:cleditor:1.2
-
cpe:2.3:a:premiumsoftware:cleditor:1.2.1
-
cpe:2.3:a:premiumsoftware:cleditor:1.2.2
-
cpe:2.3:a:premiumsoftware:cleditor:1.2.3
-
cpe:2.3:a:premiumsoftware:cleditor:1.2.4
-
cpe:2.3:a:premiumsoftware:cleditor:1.2.5
-
cpe:2.3:a:premiumsoftware:cleditor:1.2.6
-
cpe:2.3:a:premiumsoftware:cleditor:1.3.0
-
cpe:2.3:a:premiumsoftware:cleditor:1.4.0
-
cpe:2.3:a:premiumsoftware:cleditor:1.4.1
-
cpe:2.3:a:premiumsoftware:cleditor:1.4.2
-
cpe:2.3:a:premiumsoftware:cleditor:1.4.3
-
cpe:2.3:a:premiumsoftware:cleditor:1.4.4
-
cpe:2.3:a:premiumsoftware:cleditor:1.4.5