B3log Vditor vulnerabilities

• b3log vditor vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet. CVE-2024-39150 5.9 MediumJuly 5, 2024
• b3log vditor Vditor allows Cross-site Scripting via an attribute of an `A` element CVE-2024-34449 Disputed 6.1 MediumMay 3, 2024
• b3log vditor vditor vulnerable to Cross-site Scripting CVE-2021-32855 Fix available 6.1 MediumFebruary 20, 2023
• b3log vditor, vanessa219 vanessa219/vditor +1 more Cross-site Scripting (XSS) - Stored in vanessa219/vditor CVE-2022-0350 Fix available 6.1 MediumMarch 31, 2022
• b3log vditor, vanessa219 vanessa219/vditor +1 more Cross-site Scripting (XSS) - Stored in vanessa219/vditor CVE-2022-0341 Fix available 6.6 MediumMarch 14, 2022
• b3log vditor, vanessa219 vanessa219/vditor +1 more Cross-site Scripting (XSS) - Stored in vanessa219/vditor CVE-2021-4103 Fix available 6.8 MediumJanuary 23, 2022