CVE-2020-4061

2020-07-0217:15:12

Google

osv.dev

0.001 Low

EPSS

Percentile

26.5%

JSON

In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467.

CPENameOperatorVersion
octobereq1.0.370
octobereq1.0.418
octobereq1.0.454
octobereq1.0.428
octobereq1.0.457
octobereq1.0.327
octobereq1.0.460
octobereq1.0.425
octobereq1.0.411
octobereq1.0.429

Name	Operator	Version
october	eq	1.0.370
october	eq	1.0.418
october	eq	1.0.454
october	eq	1.0.428
october	eq	1.0.457
october	eq	1.0.327
october	eq	1.0.460
october	eq	1.0.425
october	eq	1.0.411
october	eq	1.0.429