Froala Editor Cross-site Scripting vulnerability

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.9.0-rc.0) +15 more potentially affected by CVE-2023-41592 via froala-editor (>=4.0.1, <=4.1.3)

froala-editor NPM version =4.0.1, =6.5.59, =11.4.15, =14.0.0-109224, =14.0.0-109224, =2.0.2, =1.6.4, =4.0.1, =4.0.1, =4.0.1, =4.1.3 - aurelia2-froala-editor 1.0.0 - froalaadmin 4.0.7 and more Source cves: CVE-2023-41592 Source advisory: OSV:GHSA-HVPQ-7VCC-5HJ5...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

Cross site scripting

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

The CVE-2023-41592 entry concerns Froala Editor (versions 4.0.1–4.1.1) with a cross-site scripting (XSS) vulnerability. Multiple connected sources attribute the flaw to the Insert Link functionality not properly sanitizing/validating user-provided links, enabling XSS. Affected component is Froala...

Froala Editor Cross-Site Scripting Vulnerability

Froala Editor is a powerful JavaScript rich text editor for individual developers. A cross-site scripting vulnerability exists in Froala Editor versions v4.0.1 to v4.1.1, which can be exploited to manipulate the preview text when inserting a link into a document, allowing the insertion of XSS cod...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

GHSA-QRHQ-X7XH-2784 Froala WYSIWYG Editor XSS Vulnerability

Froala Editor before 3.2.2 allows XSS via pasted content...

Froala WYSIWYG Editor XSS Vulnerability

Froala Editor before 3.2.2 allows XSS via pasted content...

Cross-site Scripting (XSS)

froala-editor is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input values allowing an attacker to inject maliciously crafted script via the tag and the srcdoc attribute...

GHSA-H236-G5GH-VQ6C DOM-based cross-site scripting in Froala Editor

Froala WYSIWYG HTML Editor is a lightweight WYSIWYG HTML Editor written in JavaScript that enables rich text editing capabilities for web applications. A DOM-based cross-site scripting XSS vulnerability exists in versions before 3.2.3 because HTML code in the editor is not correctly sanitized whe...

@amis-adapter/amis-editor-react (0.0.1), @amis-adapter/amis-editor-webpack (0.1.0) +1039 more potentially affected by CVE-2019-19935 via froala-editor (>=3.0.0, <=3.2.2)

froala-editor NPM version =3.0.0, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =6.10.0, =6.10.1 and more Source cves: CVE-2019-19935 Source advisory: OSV:GHSA-H236-G5GH-VQ6C...

DOM-based cross-site scripting in Froala Editor

Froala WYSIWYG HTML Editor is a lightweight WYSIWYG HTML Editor written in JavaScript that enables rich text editing capabilities for web applications. A DOM-based cross-site scripting XSS vulnerability exists in versions before 3.2.3 because HTML code in the editor is not correctly sanitized whe...

GHSA-97X5-CC53-CV4V Cross site scripting in froala-editor

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting in froala-editor

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML...

@formbird/angular-elements (>=6.5.59, <=6.5.67), @griddo/ax (>=11.4.15, <=12.9.0-rc.0) +11 more potentially affected by CVE-2020-22864 via froala-editor (>=4.0.0, <=4.0.10)

froala-editor NPM version =4.0.0, =6.5.59, =11.4.15, =1.6.4, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.10 Source cves: CVE-2020-22864 Source advisory: OSV:GHSA-97X5-CC53-CV4V...

Cross-site Scripting (XSS)

froala/wysiwyg-editor is vulnerable to cross-site scripting attacks. The vulnerability exists because the 'html.insert' in the Insert Video function does not properly sanitize the user input, which allows a malicious attacker to inject and execute arbitrary web script...