Vulnerabilities > Xheditor

DATE CVE VULNERABILITY TITLE RISK
2018-11-03 CVE-2018-18909 Cross-site Scripting vulnerability in Xheditor 1.2.2
xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view.
network
xheditor CWE-79
4.3