A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/jackfromeast/d52c506113f33b8871d0e647411df894 | Exploit Third Party Advisory Patch |
Configurations
History
07 Jul 2025, 17:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:umeditor_project:umeditor:1.2.3:*:*:*:*:*:*:* | |
| First Time |
Umeditor Project
Umeditor Project umeditor |
|
| References | () https://gist.github.com/jackfromeast/d52c506113f33b8871d0e647411df894 - Exploit, Third Party Advisory, Patch |
03 Mar 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-03 17:15
Updated : 2025-07-07 17:56
NVD link : CVE-2024-53387
Mitre link : CVE-2024-53387
JSON object : View
Products Affected
umeditor_project
- umeditor
CWE
No CWE.