GCVE - cpe:2.3:a:b3log:vditor:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:b3log:vditor:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	B3Log (`86d16015-6676-51cc-958c-521884a67196`)
Product	Vditor (`db42579c-3756-5023-a493-5331152b47b5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/vanessa219/vditor`	purl2cpe	2026-06-01 10:11:23.453524
`pkg:npm/vditor`	purl2cpe	2026-06-01 10:11:23.453528

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-39150`	vulnerable	2026-06-08 06:41:48.753349	Details available vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet. Published: 2024-07-05T00:00:00.000Z Updated: 2024-11-13T17:17:13.337Z Open on db.gcve.eu Reference links https://b3log.org/vditor/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0350`	vulnerable	2026-06-08 05:39:09.866048	Cross-site Scripting (XSS) - Stored in vanessa219/vditor MEDIUM (6.1) Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13. Published: 2022-03-31T15:15:14.000Z Updated: 2024-08-02T23:25:40.226Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/8202aa06-4b49-45ff-aa0f-00982f62005c https://github.com/vanessa219/vditor/commit/e912e36ea98251d700499b1ac7702708d3398476	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0341`	vulnerable	2026-06-08 05:39:09.806356	Cross-site Scripting (XSS) - Stored in vanessa219/vditor MEDIUM (6.6) Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12. Published: 2022-03-14T04:10:09.000Z Updated: 2024-08-02T23:25:40.270Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/fa546b57-bc15-4705-824e-9474b616f628 https://github.com/vanessa219/vditor/commit/219f8a9e272aba3cbc0096a82cac776532dbb9e5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-4103`	vulnerable	2026-06-08 05:38:08.338609	Cross-site Scripting (XSS) - Stored in vanessa219/vditor MEDIUM (6.8) Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34. Published: 2022-01-23T01:45:11.000Z Updated: 2024-08-03T17:16:04.162Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/67b980af-7357-4879-9448-a926c6474225 https://github.com/vanessa219/vditor/commit/8d4d0889dd72b2f839e93a49db3da3a370416c7d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32855`	vulnerable	2026-06-08 05:32:08.173433	vditor vulnerable to Cross-site Scripting MEDIUM (6.1) Vditor is a browser-side Markdown editor. Versions prior to 3.8.7 are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. Version 3.8.7 contains a patch for this issue. Published: 2023-02-20T00:00:00.000Z Updated: 2025-03-10T21:08:46.394Z Open on db.gcve.eu Reference links https://securitylab.github.com/advisories/GHSL-2021-1006-vditor/ https://github.com/Vanessa219/vditor/issues/1085 https://github.com/Vanessa219/vditor/commit/1b2382d7f8a4ee509d9245db4450d926a0b24146	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.