EUVD-2022-5026

Malicious code in bioql PyPI...

CVE-2024-51434

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

CVE-2023-42426

Cross-site scripting XSS vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

CVE-2020-22864

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-26523

Froala Editor before 3.2.2 allows XSS via pasted content...

CVE-2020-4061

In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467...

CVE-2019-19935

Froala Editor before 3.2.3 allows XSS...

Cross-site Scripting (XSS)

Overview django-froala-editor is a django-froala-editor package helps integrate Froala WYSIWYG HTML editor with Django. Affected versions of this package are vulnerable to Cross-site Scripting XSS when pasting copied content into the editor. Details Cross-site scripting or XSS is a code...

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.9.0-rc.0) +17 more potentially affected by CVE-2024-51434 via froala-editor (>=4.0.0, <=4.2.2)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =26.2.3, =26.2.3, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.2.2 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2024-51434 Source advisory: OSV:GHSA-549P-5C7F-C5P4...

GHSA-549P-5C7F-C5P4 Froala WYSIWYG editor allows cross-site scripting (XSS)

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

Froala WYSIWYG editor allows cross-site scripting (XSS)

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

CVE-2024-51434

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

CVE-2024-51434

CVE-2024-51434 affects Froala WYSIWYG Editor, with versions 4.3.0 and earlier vulnerable due to inconsistent parsing of the tag, enabling cross-site scripting (XSS). The issue is supported by multiple sources in the Connected documents, which identify the affected product and root cause. Impact ...

PT-2024-34634 · Froala · Froala Wysiwyg Editor

Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG editor versions 4.3.0 and earlier Description: The issue is related to inconsistent parsing of the tag, which allows for cross-site scripting XSS in the Froala WYSIWYG editor. Recommendations: For versions 4.3.0 and earlier,...

CVE-2024-51434

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

CVE-2024-51434

Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...

Froala Editor 安全漏洞

Froala Editor is a powerful JavaScript rich text editor from Froala. A security vulnerability exists in Froala Editor version 4.3.0 and earlier, which stems from the presence of inconsistent plaintext token parsing, resulting in susceptibility to cross-site scripting vulnerabilities...

School Log Management System 1.0 SQL Injection / Code Execution

============================================================================================================================================= | Title : School Log Management System 1.0 WYSIWYG Settings Management Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...