CVE-2025-3191

creationtimestamp| type| source ---|---|--- 2025-04-04 07:58:45+00:00| seen| https://t.me/cvedetector/22077 2025-07-16 21:34:29+00:00| published-proof-of-concept| https://t.me/AGLegends/1985 2025-07-16 23:31:02+00:00| published-proof-of-concept| https://t.me/cybersecunity/284...

@1studio/ui (>=1.0.7, <=2.83.0), @cleverlyworks/industry-ui (3.0.10) +69 more potentially affected by CVE-2025-3191 via react-draft-wysiwyg (>=1.10.0, <=1.14.7)

react-draft-wysiwyg NPM version =1.10.0, =1.0.7, =1.24.1-dev.0, =0.0.2, =2.0.0, =0.1.0, =1.0.0, =1.0.0, =5.0.0, =1.0.0-rc.1.0.0, =0.1.1, =0.1.5, =0.8.6, =0.0.15, =2.1.19, =2.1.25 and more Source cves: CVE-2025-3191 Source advisory: OSV:GHSA-FQ5X-7292-2P5R...

CVE-2025-3191

All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting XSS via the Embedded button which will then result in saving the payload in the tag...

CVE-2025-3191

All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting XSS via the Embedded button which will then result in saving the payload in the tag...

@1kit/react (>=0.0.74, <=0.0.149), @1kit/ui (>=0.0.14, <=0.0.90) +769 more potentially affected by CVE-2025-3191 via react-draft-wysiwyg (>=1.10.0, <=1.15.0)

react-draft-wysiwyg NPM version =1.10.0, =0.0.74, =0.0.14, =1.0.7, =0.2.2, =1.0.0, =0.0.5, =0.1.2, =1.0.2, =1.0.0-beta.1, =2.3.30, =1.0.2, =2.0.54, =2.3.26 and more Source cves: CVE-2025-3191 Source advisory: SNYK:JS-REACTDRAFTWYSIWYG-8515884...