CVE-2026-106143

Cross-Site Scripting XSS in the Editor component @progress/kendo-vue-editor in Progress Software Kendo UI for Vue versions 2.7.1 through 10.0.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via an unsafe URL entered in the...