CVE-2026-124491 SunEditor before 3.4.0 Stored XSS via FileUpload Plugin Filename

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create method that assigns server-returned file names to innerHTML without escaping. Attackers can upload files with HTML-laden names that bypass html.clean and execute JavaScript in victims'...