CVE-2023-42426

2023-09-2500:00:00

mitre

www.cve.org

vulnerability

cross-site scripting

froala editor

arbitrary code execution

remote attackers

0.002 Low

EPSS

Percentile

58.3%

JSON

Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the ‘Insert link’ parameter in the ‘Insert Image’ component.

References

froala.com

github.com/b0marek/CVE-2023-42426

www.youtube.com/watch?v=Me33Dx1_XqQ

0.002 Low

EPSS

Percentile

58.3%

JSON

Related for CVELIST:CVE-2023-42426