How many b3log vditor CVEs are in CISA KEV?

None of b3log vditor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of b3log vditor are affected?

10 distinct b3log vditor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in b3log vditor CVEs?

b3log vditor's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of b3log vditor CVEs?

The average CVSS base score across b3log vditor's scored CVEs is 5.7.

b3log vditor Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: b3log vditor vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

b3log vditor Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

b3log vditor has 6 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 5.7.

Severity and exploitation

How the CVSS severity of b3log vditor's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of b3log vditor's CVEs are currently listed in CISA's KEV catalog.

Public exploits

5 of b3log vditor's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every b3log vditor version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.0.341 CVE
< 3.8.121 CVE
< 3.8.131 CVE
< 3.8.71 CVE
<= 3.9.81 CVE
3.10.3 <= v <= 3.10.31 CVE

Fixed in

1.0.341 CVE
3.8.121 CVE
3.8.131 CVE
3.8.71 CVE

Find a version

6 CVEs

Sort

Medium vulnerability · 2024-07-05
CVE-2024-39150
Medium · CVSS 5.9
EPSS 0.3% (24th pct)2024-07-05
Vditor allows Cross-site Scripting via an attribute of an `A` element
CVE-2024-34449
Public exploit
CWE-79
Medium · CVSS 6.1
EPSS 0.4% (28th pct)2024-05-03
Vditor Cross-site Scripting vulnerability
CVE-2021-32855
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.6% (47th pct)2023-02-20
Cross-site Scripting in vditor
CVE-2022-0350
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (45th pct)2022-03-31
Cross-site Scripting in vditor
CVE-2022-0341
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (39th pct)2022-03-14
vditor Vulnerable to Cross-site Scripting in SVG events
CVE-2021-4103
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.7% (51th pct)2022-01-23

Common weakness types

The CWE weakness categories most often found in b3log vditor CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs

Disclosure activity by year

How many b3log vditor CVEs were published each year.

2022

2023

2024

Other b3log products

Browse vulnerabilities for other products by b3log.

siyuan193 CVEs symphony7 CVEs solo3 CVEs github.com/b3log/wide1 CVEs org.b3log:symphony1 CVEs wide1 CVEs

All b3log vulnerabilities

Frequently asked questions

Common questions about b3log vditor vulnerabilities.

How many CVEs does b3log vditor have?: b3log vditor has 6 published CVE records since 2022.
How many b3log vditor CVEs are in CISA KEV?: None of b3log vditor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for b3log vditor vulnerabilities?: Yes — 5 of b3log vditor's CVEs have a known public exploit.
Which versions of b3log vditor are affected?: 10 distinct b3log vditor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in b3log vditor CVEs?: b3log vditor's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of b3log vditor CVEs?: The average CVSS base score across b3log vditor's scored CVEs is 5.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track b3log vditor vulnerabilities

Get an alert for each new b3log vditor CVE, with AI-written analysis and remediation steps.

Create an account See pricing