CVE-2023-26149

CVE-2023-26149 affects quill-mention before 4.0.0 with XSS risk due to improper user-input sanitization in renderList. The issue arises when the mentions list uses unsafe user-sourced data, enabling injection when a Quill user types @. The vulnerability is documented across multiple feeds (Red Ha...