Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2024-34449
Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.002
EPSS Ranking
41.5%
CVSS Severity
CVSS v3 Score
6.1
References
https://github.com/Vanessa219/vditor/blob/b3a14d6e4462b0c17141e1fcc66173264ada64e0/README_en_US.md?plain=1#L310
https://github.com/Vanessa219/vditor/issues/1604
https://github.com/Vanessa219/vditor/blob/b3a14d6e4462b0c17141e1fcc66173264ada64e0/README_en_US.md?plain=1#L310
https://github.com/Vanessa219/vditor/issues/1604
Products affected by CVE-2024-34449
B3log
»
Vditor
»
Version:
3.10.3
cpe:2.3:a:b3log:vditor:3.10.3
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved