PatchTheCVEsummernote vulnerabilities and fixes
Recent CVEs affecting summernote, with upgrade or downgrade steps. 2 tracked.
summernote has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-06-12. Highest priority: CVE-2024-29504 (score 45/100).
- CVE-2024-37629 MEDIUM 6.1 DOWNGRADE SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.
- CVE-2024-29504 HIGH 7.6 UPGRADE Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbti
FAQ
How do I fix summernote vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is summernote being exploited right now?
None of the tracked summernote CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which summernote CVE should I patch first?
CVE-2024-29504 currently ranks highest (45/100): Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbti.