CVE-2023-42426

Cross-site scripting XSS vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component...

CVE-2023-42426

CVE-2023-42426 is an XSS vulnerability in Froala Editor v4.1.1. A remote attacker can inject arbitrary code via the Insert link parameter in the Insert Image component, with a CVSS v3.1 base score of 6.1 (Medium). Exploitation details are not provided in the supplied documents. Remediation in the...

CVE-2023-42426

Cross-site scripting XSS vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component...

CVE-2023-42426

Cross-site scripting XSS vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component...

PT-2023-28334 · Froala · Froala Editor

Name of the Vulnerable Software and Affected Versions: Froala Editor version 4.1.1 Description: A cross-site scripting XSS issue allows remote attackers to execute arbitrary code via the Insert link parameter in the Insert Image component. This enables attackers to inject malicious code,...

Froala Editor Cross-Site Scripting Vulnerability

Froala Editor is a powerful JavaScript rich text editor for individual developers. A cross-site scripting vulnerability exists in Froala Editor v.4.1.1. A remote attacker can exploit this vulnerability to execute arbitrary code via the "Insert link" parameter in the "Insert Image" component...

GHSA-HVPQ-7VCC-5HJ5 Froala Editor Cross-site Scripting vulnerability

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

Froala Editor Cross-site Scripting vulnerability

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.9.0-rc.0) +15 more potentially affected by CVE-2023-41592 via froala-editor (>=4.0.1, <=4.1.3)

froala-editor NPM version =4.0.1, =6.5.59, =11.4.15, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.1, =4.0.1, =4.0.1, =4.1.3 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2023-41592 Source advisory: OSV:GHSA-HVPQ-7VCC-5HJ5...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

Cross site scripting

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

The CVE-2023-41592 entry concerns Froala Editor (versions 4.0.1–4.1.1) with a cross-site scripting (XSS) vulnerability. Multiple connected sources attribute the flaw to the Insert Link functionality not properly sanitizing/validating user-provided links, enabling XSS. Affected component is Froala...

Froala Editor Cross-Site Scripting Vulnerability

Froala Editor is a powerful JavaScript rich text editor for individual developers. A cross-site scripting vulnerability exists in Froala Editor versions v4.0.1 to v4.1.1, which can be exploited to manipulate the preview text when inserting a link into a document, allowing the insertion of XSS cod...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

GHSA-QRHQ-X7XH-2784 Froala WYSIWYG Editor XSS Vulnerability

Froala Editor before 3.2.2 allows XSS via pasted content...

Froala WYSIWYG Editor XSS Vulnerability

Froala Editor before 3.2.2 allows XSS via pasted content...

Cross-site Scripting (XSS)

froala-editor is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input values allowing an attacker to inject maliciously crafted script via the tag and the srcdoc attribute...