CVE-2026-106143

Progress Software Kendo UI for Vue versions 2.7.1 through 10.0.0 are vulnerable to a Cross-Site Scripting (XSS) flaw in the Editor component (@progress/kendo-vue-editor). A low-privileged attacker capable of providing Editor content can execute arbitrary JavaScript in another user's browser by en...