CVE-2018-19048: DOM XSS

May 13, 2019

Simditor allows DOM XSS via an onload attribute within a malformed SVG element.

References

github.com/hkglue/simditor_demo.git
github.com/hkglue/simditor_dom_xss/blob/master/README.md
github.com/mycolorway/simditor/commit/ef01a643cbb7f8163535d6bfb71135f80ec6a6fd
github.com/mycolorway/simditor/releases/tag/v2.3.22

Code Behaviors & Features

Detect and mitigate CVE-2018-19048 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →