VULNERABILITY INTELLIGENCE

CVE-2024-0647

CVSS score4.3 MEDIUM

EPSS probability0.71%

CISA KEVNot currently listed

Published2024-01-17

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

A vulnerability, which was classified as problematic, was found in Sparksuite SimpleMDE up to 1.11.2. This affects an unknown part of the component iFrame Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251373 was assigned to this vulnerability.

Weakness classification

cna@vuldb.com: CWE-79

Primary references

cna@vuldb.com — Permissions Required, Third Party Advisory
cna@vuldb.com — Third Party Advisory
cna@vuldb.com — Exploit
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit