CVE-2024-34449

Published May 3, 2024

Last updated 3 months ago

Overview

Description
Vditor 3.10.3 allows XSS via an attribute of an A element. NOTE: the vendor indicates that a user is supposed to mitigate this via sanitize=true.
Source
cve@mitre.org
NVD status
Awaiting Analysis
CNA Tags
disputed

Social media

Hype score
Not currently trending