CVE-2025-71464

The @kolkov/angular-editor library (versions before 3.0.4 ) is vulnerable to a Cross-Site Scripting (XSS) flaw within the toggleEditorMode() function. The root cause is the assignment of source view text to innerHTML without utilizing DomSanitizer for proper sanitization. An attacker can trick a ...