{ "id": "CVE-2024-29504", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-10T22:15:07.287", "lastModified": "2024-04-10T22:15:07.287", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter." } ], "metrics": {}, "references": [ { "url": "https://gist.github.com/phoenix118go/a9192281efcfa518daa709ab7638712b", "source": "cve@mitre.org" }, { "url": "https://github.com/summernote/summernote/pull/3782", "source": "cve@mitre.org" } ] }