npm/vditor — 5 CVEs

MEDIUM6.1CVE-2021-32855Vditor Cross-site Scripting vulnerability

from 0, < 3.8.7

MEDIUM5.4CVE-2022-0350Cross-site Scripting in vditor

from 0, < 3.8.13

MEDIUM5.4CVE-2022-0341Cross-site Scripting in vditor

from 0, < 3.8.11

MEDIUM5.4CVE-2021-4103vditor Vulnerable to Cross-site Scripting in SVG events

from 0, < 3.8.11

—Vditor allows Cross-site Scripting via an attribute of an `A` element

pkg:npm/vditor