PT-2018-12293

Name of the Vulnerable Software and Affected Versions Progress Kendo UI Editor version 2018.1.221 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary JavaScript into the DOM of the WYSIWYG editor due to the editorNS.Serializer to toEditableHtml function in...