{"id":"CVE-2018-13339","details":"Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a related issue to CVE-2018-7035.","aliases":["GHSA-88fh-8979-q2rr"],"modified":"2026-07-08T18:16:54.185773Z","published":"2018-07-05T22:29:00.390Z","references":[{"type":"EVIDENCE","url":"https://github.com/TylerGarlick/angular-redactor/issues/77"},{"type":"EVIDENCE","url":"https://github.com/gleez/cms/issues/796"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tylergarlick/angular-redactor","events":[{"introduced":"cc193ee8543ec85e825005bde7b07bfb8907d53f"},{"last_affected":"cc193ee8543ec85e825005bde7b07bfb8907d53f"}],"database_specific":{"cpe":"cpe:2.3:a:angular_redactor_project:angular_redactor:1.1.6:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.1.6"},{"last_affected":"1.1.6"}],"source":"CPE_STRING"}}],"versions":["1.1.6","v1.1.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13339.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}