CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

Cross site scripting

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

CVE-2021-30109

Affected product: Froala Editor 3.2.6. Vulnerability: Cross-site scripting (XSS) in the hyperlink creation module. Root cause: base64 crafted strings can trigger persistent XSS under certain conditions. Impact: persistent XSS described; no specifics on affected platforms beyond Froala Editor 3.2....

CVE-2021-30109: Improper Neutralization of Input During Web Page Generation

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

froala editor 跨站脚本漏洞

Froala Editor is a Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in the hyperlink creation module in Froala Editor version 3.2.6. The vulnerability can be exploited to conduct cross-site scripting attacks via specially crafted base64 strings...

Froala 3.2.6-1 Cross Site Scripting

Exploit Title: Stored XSS and Html Code Injection Editor Froala Version 3.2.6-1 Date:06.03.2021 Author: Vincent666 ibn Winnie Software Link: https://froala.com/wysiwyg-editor/ Tested on: Windows 10 Web Browser: Mozilla Firefox My Youtube Channel:...

CVE-2020-26523

Froala Editor before 3.2.2 allows XSS via pasted content...

CVE-2020-26523

Froala Editor before 3.2.2 allows XSS via pasted content...

CVE-2020-26523

Froala Editor before 3.2.2 allows XSS via pasted content...

CVE-2020-26523

Froala Editor prior to 3.2.2 is vulnerable to XSS via pasted content . Affected: Froala Editor (WYSIWYG) before 3.2.2; root cause: improper handling of pasted HTML. Impact: cross-site scripting (CVSSv3.1 base score 6.1; vector Nv: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Exploitation details are not...

CVE-2020-26523: Improper Neutralization of Input During Web Page Generation

Froala Editor before 3.2.2 allows XSS via pasted content...

CVE-2019-19935

Froala Editor before 3.2.3 allows XSS...

CVE-2019-19935

Froala Editor before 3.2.3 allows XSS...

Cross site scripting

Froala Editor before 3.2.3 allows XSS...

CVE-2019-19935

Froala Editor prior to 3.2.3 is vulnerable to DOM-based XSS due to improper sanitization when HTML is inserted into the DOM. Affected versions include 3.2.2 and earlier; exploitation can occur via editor content manipulation (e.g., switching to code view). Remediation: upgrade to 3.2.3 or later w...

CVE-2019-19935

Froala Editor before 3.2.3 allows XSS...

Froala WYSIWYG HTML Editor Cross-Site Scripting Vulnerability

Froala WYSIWYG HTML Editor is a U.S. Froala company's Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in Froala WYSIWYG HTML Editor versions 3.0.6 through 3.1.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. A...