EUVD-2026-118365

Cross-Site Scripting XSS in the Editor component @progress/kendo-angular-editor in Progress Software Kendo UI for Angular versions prior to 25.3.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link or image with an...