132 matches found
CVE-2020-22864
A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-22864
A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...
Cross site scripting
A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-22864
A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-22864
CVE-2020-22864 concerns Froala WYSIWYG Editor, specifically the Insert Video function in version 3.1.0, where a cross-site scripting (XSS) vulnerability exists. The connected documents attribute the root cause to insufficient sanitization of user input in the Insert Video flow (e.g., html.insert)...
Froala WYSIWYG Editor 跨站脚本漏洞
Froala WYSIWYG Editor is a software application. A beautiful JavaScript web editor that is easy for developers to integrate and your users will love its clean design. Froala WYSIWYG Editor suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side...
PT-2021-10802 · Froala · Froala Wysiwyg Editor
Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG Editor version 3.1.0 Description: A cross site scripting XSS vulnerability in the Insert Video function of Froala WYSIWYG Editor allows attackers to execute arbitrary web scripts or HTML. Recommendations: For Froala WYSIWYG...
@amis-adapter/amis-editor-react (0.0.1), @amis-adapter/amis-editor-webpack (0.1.0) +1039 more potentially affected by CVE-2021-30109 via froala-editor (>=3.0.0, <=3.2.6)
froala-editor NPM version =3.0.0, =1.0.0, =1.0.1, =1.0.0, =0.0.1, =6.10.0, =6.10.1 and more Source cves: CVE-2021-30109 Source advisory: OSV:GHSA-CQ6W-W5RJ-P9X8...
Cross-site Scripting in Froala Editor
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
GHSA-CQ6W-W5RJ-P9X8 Cross-site Scripting in Froala Editor
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
Froala WYSIWYG Editor Cross-Site Scripting Vulnerability
Froala WYSIWYG Editor is an application. Froala WYSIWYG Editor is a cross-site scripting vulnerability that stems from an obfuscation of namespace resolution in the product. An attacker could exploit this vulnerability to obtain an administrator cookie...
Cross-site Scripting in Froala WYSIWYG Editor
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...
GHSA-RR6V-H7M8-WC9F Cross-site Scripting in Froala WYSIWYG Editor
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...
CVE-2021-28114
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...
CVE-2021-28114
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...
CVE-2021-28114
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...
Type confusion
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...
CVE-2021-28114
CVE-2021-28114 affects Froala WYSIWYG Editor 3.2.6-1 with an XSS flaw caused by a namespace confusion during parsing. Red Hat, CNVD, OSV, and others report the issue and, in CNVD, an attacker could obtain an administrator cookie. The initial entry provides the vulnerability description and CVSS m...
CVE-2021-28114
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing...
Froala WYSIWYG Editor 跨站脚本漏洞
Froala WYSIWYG Editor is an application. Froala WYSIWYG Editor is a cross-site scripting vulnerability that stems from an obfuscation of namespace resolution in the product. An attacker could exploit this vulnerability to obtain an administrator cookie...