Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-34449

Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.5%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2024-34449
  • B3log » Vditor » Version: 3.10.3
    cpe:2.3:a:b3log:vditor:3.10.3


Contact Us

Shodan ® - All rights reserved