Lucene search
+L

96 matches found

OSV
OSV
added 2022/02/10 11:32 p.m.38 views

GHSA-H236-G5GH-VQ6C DOM-based cross-site scripting in Froala Editor

Froala WYSIWYG HTML Editor is a lightweight WYSIWYG HTML Editor written in JavaScript that enables rich text editing capabilities for web applications. A DOM-based cross-site scripting XSS vulnerability exists in versions before 3.2.3 because HTML code in the editor is not correctly sanitized whe...

6.1CVSS6.6AI score0.01847EPSS
SaveExploits3References8
vulnersOsv
vulnersOsv
added 2022/02/10 11:32 p.m.5 views

@amis-adapter/amis-editor-react (0.0.1), @amis-adapter/amis-editor-webpack (0.1.0) +1039 more potentially affected by CVE-2019-19935 via froala-editor (>=3.0.0, <=3.2.2)

froala-editor NPM version =3.0.0, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =6.10.0, =6.10.1 and more Source cves: CVE-2019-19935 Source advisory: OSV:GHSA-H236-G5GH-VQ6C...

6.1CVSS6.1AI score0.01847EPSS
SaveExploits3
Github Security Blog
Github Security Blog
added 2022/02/10 11:32 p.m.87 views

DOM-based cross-site scripting in Froala Editor

Froala WYSIWYG HTML Editor is a lightweight WYSIWYG HTML Editor written in JavaScript that enables rich text editing capabilities for web applications. A DOM-based cross-site scripting XSS vulnerability exists in versions before 3.2.3 because HTML code in the editor is not correctly sanitized whe...

6.1CVSS1.2AI score0.01847EPSS
SaveExploits3References8Affected Software1
OSV
OSV
added 2021/10/28 11:14 p.m.70 views

GHSA-97X5-CC53-CV4V Cross site scripting in froala-editor

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS6.2AI score0.00868EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2021/10/28 11:14 p.m.46 views

Cross site scripting in froala-editor

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS6.1AI score0.00868EPSS
SaveExploits1References7Affected Software1
vulnersOsv
vulnersOsv
added 2021/10/28 11:14 p.m.3 views

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.6.1) +11 more potentially affected by CVE-2020-22864 via froala-editor (>=4.0.0, <=4.0.10)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.10 Source cves: CVE-2020-22864 Source advisory: OSV:GHSA-97X5-CC53-CV4V...

6.1CVSS6.4AI score0.00868EPSS
SaveExploits1
NVD
NVD
added 2021/10/26 10:15 p.m.28 views

CVE-2020-22864

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS0.00868EPSS
SaveExploits1References2
Prion
Prion
added 2021/10/26 10:15 p.m.19 views

Cross site scripting

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

4.3CVSS6.1AI score0.00868EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.22 views

PT-2021-10802 · Froala · Froala Wysiwyg Editor

Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG Editor version 3.1.0 Description: A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML. Recommendations: For Froala WYSIWYG...

6.1CVSS6.1AI score0.00868EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2021/10/26 12:00 a.m.12 views

Froala WYSIWYG Editor 跨站脚本漏洞

Froala WYSIWYG Editor is a software application. A beautiful JavaScript web editor that is easy for developers to integrate and your users will love its clean design. Froala WYSIWYG Editor suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side...

6.1CVSS6.1AI score0.00868EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv
added 2021/10/06 5:47 p.m.3 views

@amis-adapter/amis-editor-react (0.0.1), @amis-adapter/amis-editor-webpack (0.1.0) +1039 more potentially affected by CVE-2021-30109 via froala-editor (>=3.0.0, <=3.2.6)

froala-editor NPM version =3.0.0, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =6.10.0, =6.10.1 and more Source cves: CVE-2021-30109 Source advisory: OSV:GHSA-CQ6W-W5RJ-P9X8...

6.1CVSS6.2AI score0.01224EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/10/06 5:47 p.m.52 views

Cross-site Scripting in Froala Editor

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS2AI score0.01224EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/10/06 5:47 p.m.56 views

GHSA-CQ6W-W5RJ-P9X8 Cross-site Scripting in Froala Editor

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS5.9AI score0.01224EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/07/16 1:15 p.m.4 views

CVE-2021-28114

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

5.4CVSS5.5AI score0.52037EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/07/16 12:00 a.m.11 views

Froala WYSIWYG Editor 跨站脚本漏洞

Froala WYSIWYG Editor is an application. Froala WYSIWYG Editor is a cross-site scripting vulnerability that stems from an obfuscation of namespace resolution in the product. An attacker could exploit this vulnerability to obtain an administrator cookie...

5.4CVSS5.2AI score0.52037EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/04/06 12:00 a.m.49 views

Froala Editor Cross-Site Scripting Vulnerability

Froala Editor is a Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in the hyperlink creation module in Froala Editor version 3.2.6. The vulnerability can be exploited to conduct cross-site scripting attacks via specially crafted base64 strings...

6.1CVSS6AI score0.01224EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/05 1:15 p.m.42 views

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS0.01224EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/05 1:15 p.m.39 views

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS5.6AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/05 1:15 p.m.13 views

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS6.4AI score0.01224EPSS
SaveExploits0References3
Prion
Prion
added 2021/04/05 1:15 p.m.17 views

Cross site scripting

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

4.3CVSS5.9AI score0.01224EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder