CVE-2020-22864

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.9.0-rc.0) +11 more potentially affected by CVE-2020-22864 via froala-editor (>=4.0.0, <=4.0.10)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.10 Source cves: CVE-2020-22864 Source advisory: OSV:GHSA-97X5-CC53-CV4V...

CVE-2020-22864

creationtimestamp| type| source ---|---|--- 2021-10-27 02:15:20+00:00| seen| https://t.me/cibsecurity/31258...

CVE-2020-22864

CVE-2020-22864 concerns Froala WYSIWYG Editor, specifically the Insert Video function in version 3.1.0, where a cross-site scripting (XSS) vulnerability exists. The connected documents attribute the root cause to insufficient sanitization of user input in the Insert Video flow (e.g., html.insert)...