CVE-2025-15056

A lack of data validation vulnerability in the HTML export feature in Quill allows Cross-Site Scripting XSS via unescaped formula and video embeds in the getSemanticHTML / getHTML output. This issue affects Quill 2.0.0 through 2.0.3. No fixed version has been released fix pending in unmerged PR...