CVE-2018-19048: Mycolorway Simditor

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.

Affected products

• Mycolorway Simditor: up to and including 2.3.21

Published 2019-05-13. Last modified 2026-06-17.