132 matches found
PT-2021-17750 · Froala · Froala Wysiwyg Editor
Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG Editor version 3.2.6-1 Description: The issue is related to a namespace confusion during parsing, which leads to a cross-site scripting XSS problem. Recommendations: For Froala WYSIWYG Editor version 3.2.6-1, update to a versio...
Froala Editor Cross-Site Scripting Vulnerability
Froala Editor is a Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in the hyperlink creation module in Froala Editor version 3.2.6. The vulnerability can be exploited to conduct cross-site scripting attacks via specially crafted base64 strings...
CVE-2021-30109
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
CVE-2021-30109
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
CVE-2021-30109
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
Cross site scripting
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
CVE-2021-30109
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
CVE-2021-30109
Affected product: Froala Editor 3.2.6. Vulnerability: Cross-site scripting (XSS) in the hyperlink creation module. Root cause: base64 crafted strings can trigger persistent XSS under certain conditions. Impact: persistent XSS described; no specifics on affected platforms beyond Froala Editor 3.2....
froala editor 跨站脚本漏洞
Froala Editor is a Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in the hyperlink creation module in Froala Editor version 3.2.6. The vulnerability can be exploited to conduct cross-site scripting attacks via specially crafted base64 strings...
Froala 3.2.6-1 Cross Site Scripting
Exploit Title: Stored XSS and Html Code Injection Editor Froala Version 3.2.6-1 Date:06.03.2021 Author: Vincent666 ibn Winnie Software Link: https://froala.com/wysiwyg-editor/ Tested on: Windows 10 Web Browser: Mozilla Firefox My Youtube Channel:...
Froala 3.2.6-1 Cross Site Scripting Vulnerability
Exploit Title: Stored XSS and Html Code Injection Editor Froala Version 3.2.6-1 Author: Vincent666 ibn Winnie Software Link: https://froala.com/wysiwyg-editor/ Tested on: Windows 10 Web Browser: Mozilla Firefox My Youtube Channel: https://www.youtube.com/channel/UCZOWpC2dW9sipPq5z63C2rQ PoC: In t...
CVE-2020-26523
Froala Editor before 3.2.2 allows XSS via pasted content...
CVE-2020-26523
Froala Editor before 3.2.2 allows XSS via pasted content...
CVE-2020-26523
Froala Editor prior to 3.2.2 is vulnerable to XSS via pasted content . Affected: Froala Editor (WYSIWYG) before 3.2.2; root cause: improper handling of pasted HTML. Impact: cross-site scripting (CVSSv3.1 base score 6.1; vector Nv: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Exploitation details are not...
CVE-2020-26523
Froala Editor before 3.2.2 allows XSS via pasted content...
CVE-2019-19935
Froala Editor before 3.2.3 allows XSS...
CVE-2019-19935
Froala Editor before 3.2.3 allows XSS...
Cross site scripting
Froala Editor before 3.2.3 allows XSS...
CVE-2019-19935
Froala Editor prior to 3.2.3 is vulnerable to DOM-based XSS due to improper sanitization when HTML is inserted into the DOM. Affected versions include 3.2.2 and earlier; exploitation can occur via editor content manipulation (e.g., switching to code view). Remediation: upgrade to 3.2.3 or later w...