102 matches found
CVE-2023-42426
CVE ID: CVE-2023-42426 취약점 유형: 교차 사이트 스크립팅 설명: Froala Froala Editor v.4.1.1의 교차 사이트 스크립팅XSS 취약점으로 인해 원격 공격자가 'Insert Image' 구성 요소의 'Insert link' 매개변수를 통해 임의 코드를 실행할 수 있습니다. 재현 단계: 1. "Insert Image" 옵션을 선택하고 새 이미지를 추가합니다. 2. 추가된 이미지를 클릭한 다음 "Insert Link" 옵션을 사용하여 페이로드 https://example.com"...
CVE-2023-43263
CVE ID : CVE-2023-43263 취약점 유형 : 크로스 사이트 스크립팅XSS 설명 : Froala Editor v.4.1.1의 크로스 사이트 스크립팅XSS 취약점으로 인해 공격자가 Markdown 구성 요소를 통해 임의의 코드를 실행할 수 있습니다. 재현 단계 : Markdown 구성 요소 입력에 페이로드를 입력합니다: 참조 : 1. https://vulners.com/cve/CVE-2023-43263 2. https://froala.com 3. https://www.youtube.com/watch?v=-dXipoq...
October CMS Has Stored XSS In Backend Editor Markup Classes
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
CVE-2026-24906
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
October CMS has Stored XSS in Backend Editor Markup Classes
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the processing of the Markup Classes fields within the backend editor settings. An attacker can execute arbitrary JavaScript code in the context of users who open a RichEditor by injecting malicious values th...
CVE-2026-24906
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
CVE-2026-24906 October CMS has Stored XSS in its Backend Editor Markup Classes
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
PT-2026-32726
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
CVE-2026-24906: Improper Neutralization of Input During Web Page Generation
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
CVE-2023-43263
A Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component...
EUVD-2021-2182
Malware in sbrugna...
EUVD-2021-2190
Malware in sbrugna...
EUVD-2023-2529
Malicious code in bioql PyPI...
EUVD-2023-47682
Malicious code in bioql PyPI...
EUVD-2023-46878
Malicious code in bioql PyPI...
EUVD-2022-5026
Malicious code in bioql PyPI...
EUVD-2022-1026
Malicious code in bioql PyPI...