CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

Cross site scripting

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

Froala Editor Cross-Site Scripting Vulnerability

Froala Editor is a powerful JavaScript rich text editor for individual developers. A cross-site scripting vulnerability exists in Froala Editor versions v4.0.1 to v4.1.1, which can be exploited to manipulate the preview text when inserting a link into a document, allowing the insertion of XSS cod...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-41592

The CVE-2023-41592 entry concerns Froala Editor (versions 4.0.1–4.1.1) with a cross-site scripting (XSS) vulnerability. Multiple connected sources attribute the flaw to the Insert Link functionality not properly sanitizing/validating user-provided links, enabling XSS. Affected component is Froala...

CVE-2023-41592

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting XSS vulnerability...

GHSA-QRHQ-X7XH-2784 Froala WYSIWYG Editor XSS Vulnerability

Froala Editor before 3.2.2 allows XSS via pasted content...

Froala WYSIWYG Editor XSS Vulnerability

Froala Editor before 3.2.2 allows XSS via pasted content...

Cross-site Scripting (XSS)

froala-editor is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input values allowing an attacker to inject maliciously crafted script via the tag and the srcdoc attribute...

@averystupidtest/reditor (=3.0.10), @beisen-oneops/amis-ui (>=1.0.0 <=1.0.6) +122 more potentially affected by CVE-2019-19935 via froala-editor (>=2.3.5 <=3.2.2)

froala-editor NPM version =2.3.5, =1.0.0, =1.0.0, =1.0.0, =6.10.0, =0.1.0, =6.12.0-beat1, =0.0.1, =0.1.0, =0.0.6, =0.0.5, =0.0.5, =0.2.3 and more Source cves: CVE-2019-19935 Source advisory: OSV:GHSA-H236-G5GH-VQ6C...

DOM-based cross-site scripting in Froala Editor

Froala WYSIWYG HTML Editor is a lightweight WYSIWYG HTML Editor written in JavaScript that enables rich text editing capabilities for web applications. A DOM-based cross-site scripting XSS vulnerability exists in versions before 3.2.3 because HTML code in the editor is not correctly sanitized whe...

GHSA-H236-G5GH-VQ6C DOM-based cross-site scripting in Froala Editor

Froala WYSIWYG HTML Editor is a lightweight WYSIWYG HTML Editor written in JavaScript that enables rich text editing capabilities for web applications. A DOM-based cross-site scripting XSS vulnerability exists in versions before 3.2.3 because HTML code in the editor is not correctly sanitized whe...

GHSA-97X5-CC53-CV4V Cross site scripting in froala-editor

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting in froala-editor

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML...

Cross-site Scripting (XSS)

froala/wysiwyg-editor is vulnerable to cross-site scripting attacks. The vulnerability exists because the 'html.insert' in the Insert Video function does not properly sanitize the user input, which allows a malicious attacker to inject and execute arbitrary web script...

CVE-2020-22864

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22864

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22864

CVE-2020-22864 concerns Froala WYSIWYG Editor, specifically the Insert Video function in version 3.1.0, where a cross-site scripting (XSS) vulnerability exists. The connected documents attribute the root cause to insufficient sanitization of user input in the Insert Video flow (e.g., html.insert)...