102 matches found
CVE-2023-43263
CVE ID : CVE-2023-43263 脆弱性タイプ : クロスサイトスクリプティング 説明 : Froala Editor v.4.1.1 におけるクロスサイトスクリプティング XSS の脆弱性により、攻撃者が Markdown コンポーネントを介して任意のコードを実行できる可能性があります。 再現手順 : Markdownコンポーネントの入力欄にペイロードを入力します: 参考 : 1. https://vulners.com/cve/CVE-2023-43263 2. https://froala.com 3...
CVE-2023-42426
CVE ID: CVE-2023-42426 脆弱性タイプ: クロスサイトスクリプティング XSS 説明: Froala Froala Editor v.4.1.1 にはクロスサイトスクリプティング XSS の脆弱性があり、リモートの攻撃者が「Insert Image」コンポーネント内の「Insert link」パラメータを介して任意のコードを実行できる可能性があります。 再現手順: 1. 「Insert Image」オプションを選択し、新しい画像を追加します。 2. 追加した画像をクリックし、「Insert Link」オプションを使用して、次のペイロードを入力します:...
October CMS Has Stored XSS In Backend Editor Markup Classes
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
CVE-2026-24906
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
October CMS has Stored XSS in Backend Editor Markup Classes
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the processing of the Markup Classes fields within the backend editor settings. An attacker can execute arbitrary JavaScript code in the context of users who open a RichEditor by injecting malicious values th...
CVE-2026-24906
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
CVE-2026-24906 October CMS has Stored XSS in its Backend Editor Markup Classes
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
PT-2026-32726
A stored cross-site scripting XSS vulnerability was identified in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to valid CSS class name characters. Malicious values were rendered unsanitized in Froala...
CVE-2026-24906: Improper Neutralization of Input During Web Page Generation
October is a Content Management System CMS and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cross-Site Scripting XSS vulnerability in the Backend Editor Settings. The Markup Classes fields used for paragraph styles, inline styles, table styles, etc. did not sanitize input to...
CVE-2023-43263
A Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component...
EUVD-2021-2182
Malware in sbrugna...
EUVD-2021-2190
Malware in sbrugna...
EUVD-2023-2529
Malicious code in bioql PyPI...
EUVD-2023-47682
Malicious code in bioql PyPI...
EUVD-2022-1026
Malicious code in bioql PyPI...
EUVD-2022-5026
Malicious code in bioql PyPI...
EUVD-2023-46878
Malicious code in bioql PyPI...