102 matches found
CVE-2023-42426
CVE ID: CVE-2023-42426 Tipo de Vulnerabilidad: Cross-Site Scripting Descripción: La vulnerabilidad de Cross-site scripting XSS en Froala Froala Editor v.4.1.1 permite a atacantes remotos ejecutar código arbitrario a través del parámetro 'Insertar enlace' en el componente 'Insertar imagen'. Pasos...
CVE-2023-43263
ID de CVE : CVE-2023-43263 Tipo de vulnerabilidad : Cross-Site Scripting Descripción : La vulnerabilidad de cross-site scripting XSS en Froala Editor v.4.1.1 permite a los atacantes ejecutar código arbitrario a través del componente de Markdown. Pasos para reproducir : Introduce el payload en la...
October CMS Has Stored XSS In Backend Editor Markup Classes
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
CVE-2026-24906
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
October CMS has Stored XSS in Backend Editor Markup Classes
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the processing of the Markup Classes fields within the backend editor settings. An attacker can execute arbitrary JavaScript code in the context of users who open a RichEditor by injecting malicious values th...
CVE-2026-24906
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
CVE-2026-24906 October CMS has Stored XSS in its Backend Editor Markup Classes
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
PT-2026-32726
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
CVE-2026-24906: Improper Neutralization of Input During Web Page Generation
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
CVE-2023-43263
A Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component...
EUVD-2021-2182
Malware in sbrugna...
EUVD-2021-2190
Malware in sbrugna...
EUVD-2023-47682
Malicious code in bioql PyPI...
EUVD-2023-2529
Malicious code in bioql PyPI...
EUVD-2023-46878
Malicious code in bioql PyPI...
EUVD-2022-1026
Malicious code in bioql PyPI...
EUVD-2022-5026
Malicious code in bioql PyPI...