Headline

CVE-2023-42371: Summernote - Super Simple WYSIWYG editor

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component.

1 year ago

CVE

Open in Source

#xss #vulnerability #mac #windows #linux #js #chrome #firefox

Super Simple WYSIWYG
Editor on Bootstrap

hi,
we are summernote.
please, write text here!
super simple WYSIWYG editor on Bootstrap

Easy to Install

Simply download and attach your js, css with bootstrap.

Customization

Customize by Initializing various options and modules.

Examples

See all useful features of summernote in action.

Open Source

Summernote is licensed under MIT and maintained by the community.

Integration

Integrate it with any back-end. 3rd parties available in django, rails, angular.

Features

Supports Bootstrap 3.x.x to 5.x.x
Lightweight (js+css: 100Kb)
Smart User Interaction
Works in all Major Browsers:
- Safari, Chrome, Firefox, Opera, Edge and Internet Explorer 9+
Works in all Major Operating Systems:
- Windows, MacOS, Linux

Donate

We’re using BrowserStack for testing!

Much appreciate to all contributors! Together and further…

Contributors