127 matches found
CVE-2023-41592
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2021-30109
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
CVE-2020-22864
A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-26523
Froala Editor before 3.2.2 allows XSS via pasted content...
CVE-2020-4061
In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467...
CVE-2019-19935
Froala Editor before 3.2.3 allows XSS...
Cross-site Scripting (XSS)
Overview django-froala-editor is a django-froala-editor package helps integrate Froala WYSIWYG HTML editor with Django. Affected versions of this package are vulnerable to Cross-site Scripting XSS when pasting copied content into the editor. Details Cross-site scripting or XSS is a code...
@averystupidtest/reditor (=3.0.10), @beisen-oneops/amis-ui (>=1.0.0 <=1.0.6) +167 more potentially affected by CVE-2024-51434 via froala-editor (>=2.3.5 <=4.3.0)
froala-editor NPM version =2.3.5, =1.0.0, =1.0.2, =1.0.0, =5.11.0, =1.0.1, =1.0.0, =1.0.0, =6.10.0, =0.1.0, =6.12.0-beat1, =6.12.24 and more Source cves: CVE-2024-51434 Source advisory: OSV:GHSA-549P-5C7F-C5P4...
Froala WYSIWYG editor allows cross-site scripting (XSS)
Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...
GHSA-549P-5C7F-C5P4 Froala WYSIWYG editor allows cross-site scripting (XSS)
Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...
CVE-2024-51434
Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...
CVE-2024-51434
Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...
Froala Editor 安全漏洞
Froala Editor is a powerful JavaScript rich text editor from Froala. A security vulnerability exists in Froala Editor version 4.3.0 and earlier, which stems from the presence of inconsistent plaintext token parsing, resulting in susceptibility to cross-site scripting vulnerabilities...
CVE-2024-51434
Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier...
CVE-2024-51434
CVE-2024-51434 affects Froala WYSIWYG Editor, with versions 4.3.0 and earlier vulnerable due to inconsistent parsing of the tag, enabling cross-site scripting (XSS). The issue is supported by multiple sources in the Connected documents, which identify the affected product and root cause. Impact ...
PT-2024-34634 · Froala · Froala Wysiwyg Editor
Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG editor versions 4.3.0 and earlier Description: The issue is related to inconsistent parsing of the tag, which allows for cross-site scripting XSS in the Froala WYSIWYG editor. Recommendations: For versions 4.3.0 and earlier,...
School Log Management System 1.0 SQL Injection / Code Execution
============================================================================================================================================= | Title : School Log Management System 1.0 WYSIWYG Settings Management Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...
Simple College Website 1.0 SQL Injection / Code Execution
============================================================================================================================================= | Title : Simple College Website 1.0 WYSIWYG Settings Management Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...
The vulnerability of the Markdown component of the WYSIWYG editor Froala Editor, which allows a hacker to execute arbitrary code.
The vulnerability of the Markdown component of the WYSIWYG editor Froala Editor exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
