Lucene search
+L

132 matches found

NVD
NVD
added 2021/10/26 10:15 p.m.30 views

CVE-2020-22864

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS0.00868EPSS
SaveExploits1References2
OSV
OSV
added 2021/10/26 10:15 p.m.22 views

CVE-2020-22864

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS6AI score
SaveExploits0References2
Prion
Prion
added 2021/10/26 10:15 p.m.21 views

Cross site scripting

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

4.3CVSS6.1AI score0.00868EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/10/26 9:08 p.m.41 views

CVE-2020-22864

A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...

6.1AI score0.00868EPSS
SaveExploits1References2
CVE
CVE
added 2021/10/26 9:08 p.m.83 views

CVE-2020-22864

CVE-2020-22864 concerns Froala WYSIWYG Editor, specifically the Insert Video function in version 3.1.0, where a cross-site scripting (XSS) vulnerability exists. The connected documents attribute the root cause to insufficient sanitization of user input in the Insert Video flow (e.g., html.insert)...

6.1CVSS6AI score0.00868EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/10/26 12:00 a.m.14 views

Froala WYSIWYG Editor 跨站脚本漏洞

Froala WYSIWYG Editor is a software application. A beautiful JavaScript web editor that is easy for developers to integrate and your users will love its clean design. Froala WYSIWYG Editor suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side...

6.1CVSS6.1AI score0.00868EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.24 views

PT-2021-10802 · Froala · Froala Wysiwyg Editor

Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG Editor version 3.1.0 Description: A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML. Recommendations: For Froala WYSIWYG...

6.1CVSS6.1AI score0.00868EPSS
SaveExploits1References12
vulnersOsv
vulnersOsv
added 2021/10/06 5:47 p.m.5 views

@amis-adapter/amis-editor-react (0.0.1), @amis-adapter/amis-editor-webpack (0.1.0) +1039 more potentially affected by CVE-2021-30109 via froala-editor (>=3.0.0, <=3.2.6)

froala-editor NPM version =3.0.0, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =6.10.0, =6.10.1 and more Source cves: CVE-2021-30109 Source advisory: OSV:GHSA-CQ6W-W5RJ-P9X8...

6.1CVSS6.2AI score0.01224EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/10/06 5:47 p.m.54 views

Cross-site Scripting in Froala Editor

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS2AI score0.01224EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/10/06 5:47 p.m.57 views

GHSA-CQ6W-W5RJ-P9X8 Cross-site Scripting in Froala Editor

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS5.9AI score0.01224EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/07/20 12:00 a.m.59 views

Froala WYSIWYG Editor Cross-Site Scripting Vulnerability

Froala WYSIWYG Editor is an application. Froala WYSIWYG Editor is a cross-site scripting vulnerability that stems from an obfuscation of namespace resolution in the product. An attacker could exploit this vulnerability to obtain an administrator cookie...

5.4CVSS1.9AI score0.52037EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2021/07/19 9:21 p.m.84 views

Cross-site Scripting in Froala WYSIWYG Editor

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

5.4CVSS1.8AI score0.52037EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/07/19 9:21 p.m.78 views

GHSA-RR6V-H7M8-WC9F Cross-site Scripting in Froala WYSIWYG Editor

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

5.4CVSS5.2AI score0.52037EPSS
SaveExploits0References3
NVD
NVD
added 2021/07/16 1:15 p.m.29 views

CVE-2021-28114

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

5.4CVSS0.52037EPSS
SaveExploits0References3
OSV
OSV
added 2021/07/16 1:15 p.m.23 views

CVE-2021-28114

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

5.4CVSS5.9AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/07/16 1:15 p.m.6 views

CVE-2021-28114

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

5.4CVSS5.5AI score0.52037EPSS
SaveExploits0References4
Prion
Prion
added 2021/07/16 1:15 p.m.21 views

Type confusion

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

3.5CVSS5.2AI score0.52037EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/07/16 12:16 p.m.78 views

CVE-2021-28114

CVE-2021-28114 affects Froala WYSIWYG Editor 3.2.6-1 with an XSS flaw caused by a namespace confusion during parsing. Red Hat, CNVD, OSV, and others report the issue and, in CNVD, an attacker could obtain an administrator cookie. The initial entry provides the vulnerability description and CVSS m...

5.4CVSS5.2AI score0.52037EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/07/16 12:16 p.m.29 views

CVE-2021-28114

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...

5.4AI score0.52037EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/16 12:00 a.m.13 views

Froala WYSIWYG Editor 跨站脚本漏洞

Froala WYSIWYG Editor is an application. Froala WYSIWYG Editor is a cross-site scripting vulnerability that stems from an obfuscation of namespace resolution in the product. An attacker could exploit this vulnerability to obtain an administrator cookie...

5.4CVSS5.2AI score0.52037EPSS
SaveExploits0References4
Rows per page
Query Builder