CVE-2026-106141

Cross-Site Scripting XSS in the Editor component @progress/kendo-angular-editor in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link or image with an...

CVE-2026-106141 Cross-Site Scripting in Progress Software Kendo UI for Angular

Cross-Site Scripting XSS in the Editor component @progress/kendo-angular-editor in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link or image with an...

EUVD-2026-118365

Cross-Site Scripting XSS in the Editor component @progress/kendo-angular-editor in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link or image with an...

CVE-2026-106141

Progress Software Kendo UI for Angular versions prior to 25.3.0 are vulnerable to a Cross-Site Scripting (XSS) flaw in the Editor component (@progress/kendo-angular-editor). A low-privileged attacker who can provide Editor content can inject a link or image with an unsafe URL . If a user interact...

WS-2020-0138

Kendo UI for Angular Editor Component npm package @progress/kendo-angular-editor before version 1.2.3 is vulnerable to Cross-Site Scripting. When the Editor content contains potentially malicious scripts in element event handlers, they get executed. Adding the following content to the Editor valu...

Cross-site Scripting (XSS)

@progress/kendo-angular-editor is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of the Editor content element passed through event handlers gets executed without sanitization...

PT-2020-21363

Name of the Vulnerable Software and Affected Versions @progress/kendo-angular-editor versions prior to 1.2.3 Description The issue allows for Cross-Site Scripting when the Editor content contains potentially malicious scripts in element event handlers, which get executed. For example, adding the...