Slab Quill Cross-Site Scripting Vulnerability

Slab Quill is a rich text editor with good compatibility and extensibility. A stored cross-site scripting vulnerability exists in the HTML editor of Slab Quill version 4.8.0, which can be exploited by an attacker to execute arbitrary JavaScript...

CVE-2021-3163

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload a crafted onloadstart attribute of an IMG element in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended...

CVE-2021-3163

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload a crafted onloadstart attribute of an IMG element in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended...

CVE-2021-3163

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload a crafted onloadstart attribute of an IMG element in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended...

CVE-2021-3163

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload a crafted onloadstart attribute of an IMG element in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended...

CVE-2021-3163

Slab Quill 4.8.0 contains a stored XSS in its HTML editor. An attacker can inject JavaScript by storing an XSS payload using a crafted onloadstart attribute on an IMG element, leading to arbitrary script execution. Multiple sources (NVD entry, CNVD, OSV/GHSA advisories) describe the issue; adviso...

CVE-2021-3163

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload a crafted onloadstart attribute of an IMG element in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended...

PT-2021-19452 · Unknown · Slab Quill

Name of the Vulnerable Software and Affected Versions: Slab Quill version 4.8.0 Description: A vulnerability in the HTML editor of Slab Quill allows an attacker to execute arbitrary JavaScript by storing an XSS payload, specifically a crafted onloadstart attribute of an IMG element, in a text...

Quill 跨站脚本漏洞

Slab Quill is a rich text editor with good compatibility and extensibility. A stored cross-site scripting vulnerability exists in the HTML editor of Slab Quill version 4.8.0, which can be exploited by an attacker to execute arbitrary JavaScript...

Reverse Tabnabbing in quill

Versions of quill prior to 1.3.7 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation No fix is currently available...

@alessio.filippucci/admin-dashboard-core (0.0.0-development), @avoux/invoicing-manager (>=1.0.6, <=2.0.0) +114 more potentially affected by unknown CVE via quill (>=1.0.0, <=1.3.6)

quill NPM version =1.0.0, =1.0.6, =4.6.201905201249, =4.6.201907261001, =4.5.201903181201, =7.11.2-snapshot-1568934257537, =3.0.201812052008, =2.0.5-web, =1.0.9, =1.9.0, =28.3.0, =0.2.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-588M-9QG5-35PQ...

GHSA-588M-9QG5-35PQ Reverse Tabnabbing in quill

Versions of quill prior to 1.3.7 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation No fix is currently available...

Reverse Tabnabbing

Overview Versions of quill prior to 1.3.7 are vulnerable to Reverse Tabnabbing. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks. Recommendation No fix is currently...

AndroidSecNotes

It is an offensive tool for Android. The repository contains learning notes about Android Security, specifically about the Android Runtime ART and its debugging tools. The notes cover the format of Dex files, the ART runtime, and the Hook framework. The notes mention the use of the "oatdump" tool...

Reverse Tabnabbing

quill is vulnerable to reverse tabnabbing attacks. The vulnerability exists due to the lack of rel property set in the target attribute that is set to blank, allowing tabnabbing attacks...

quill-platform.com XSS vulnerability

Vulnerable URL: https://www.quill-platform.com/passwordresets Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1753368 Google Pagerank| 1 VIP website status...