@boisduval/component_lib (>=0.1.24, <=0.1.27), @chaoswise/ui (>=0.0.24, <=0.0.100) +306 more potentially affected by unknown CVE via wangeditor (>=2.1.23, <=3.1.1)

wangeditor NPM version =2.1.23, =0.1.24, =0.0.24, =0.1.1, =1.0.0, =1.0.4-bate.66, =0.0.18-beta.0, =0.0.1, =1.0.0, =1.0.112, =0.0.5, =0.1.27, =0.1.40 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0250...

WS-2019-0250

all versions of wangeditor are vulnerable to Cross-Site Scripting. when failing to properly encode output, allowing arbitrary JavaScript to be inserted in links and executed by browsers...

@boisduval/component_lib (>=0.1.24, <=0.1.27), @chaoswise/ui (>=0.0.24, <=0.0.100) +306 more potentially affected by unknown CVE via wangeditor (>=2.1.23, <=3.1.1)

wangeditor NPM version =2.1.23, =0.1.24, =0.0.24, =0.1.1, =1.0.0, =1.0.4-bate.66, =0.0.18-beta.0, =0.0.1, =1.0.0, =1.0.112, =0.0.5, =0.1.27, =0.1.40 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0249...

Malicious Package

Overview @wangeditoreditor/editor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @wangeditor_editor/editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7e992b391fd117aafc0f2ac03e69c68f62cbd639b2a71025b8680cc4a17a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33339

Malicious code in @wangeditoreditor/editor npm...

EUVD-2023-28308

Malicious code in bioql PyPI...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function

There is a cross-site scripting XSS issue in wangEditor via the image upload function in version 4.7.11. This issue has been fixed in version 4.7.12...

@boisduval/component_lib (>=0.1.24, <=0.1.27), @chaoswise/ui (>=0.0.24, <=0.0.100) +311 more potentially affected by CVE-2022-25037 via wangeditor (>=2.1.23, <=4.7.11)

wangeditor NPM version =2.1.23, =0.1.24, =0.0.24, =0.1.1, =1.0.0, =1.0.4-bate.66, =0.0.18-beta.0, =0.0.1, =1.0.0, =1.0.112, =0.0.5, =0.1.27, =0.1.40 and more Source cves: CVE-2022-25037 Source advisory: MEND:CVE-2022-25037...

@boisduval/component_lib (>=0.1.24, <=0.1.27), @chaoswise/ui (>=0.0.24, <=0.0.100) +311 more potentially affected by CVE-2022-25038 via wangeditor (>=2.1.23, <=4.7.11)

wangeditor NPM version =2.1.23, =0.1.24, =0.0.24, =0.1.1, =1.0.0, =1.0.4-bate.66, =0.0.18-beta.0, =0.0.1, =1.0.0, =1.0.112, =0.0.5, =0.1.27, =0.1.40 and more Source cves: CVE-2022-25038 Source advisory: MEND:CVE-2022-25038...

wangEditor Security Vulnerability

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in wangEditor version 4.7.11, which stems from vulnerability to cross-site scripting XSS attacks...

wangEditor Security Vulnerability

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in wangEditor version 4.7.11, which stems from vulnerability to cross-site scripting XSS attacks...

CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

PT-2023-31247 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.111 Description: A reflective cross-site scripting XSS issue was discovered in DedeCMS via the component select media post wangEditor.php. This allows for potential XSS attacks. Recommendations: For DedeCMS version 5.7.111...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

Cross site scripting

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

wangEditor cross-site scripting vulnerability

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in version v5 of wangEditor, which stems from a cross-site scripting XSS vulnerability...