1 matches found
Cross-site Scripting (XSS)
@progress/kendo-angular-editor is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of the Editor content element passed through event handlers gets executed without sanitization...