Malicious Package

Overview @wangeditoreditor/editor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-33339

Malicious code in @wangeditoreditor/editor npm...

Malicious code in @wangeditor_editor/editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7e992b391fd117aafc0f2ac03e69c68f62cbd639b2a71025b8680cc4a17a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2023-28308

Malicious code in bioql PyPI...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function

There is a cross-site scripting XSS issue in wangEditor via the image upload function in version 4.7.11. This issue has been fixed in version 4.7.12...

wangEditor Security Vulnerability

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in wangEditor version 4.7.11, which stems from vulnerability to cross-site scripting XSS attacks...

wangEditor Security Vulnerability

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in wangEditor version 4.7.11, which stems from vulnerability to cross-site scripting XSS attacks...

CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

PT-2023-31247 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.111 Description: A reflective cross-site scripting XSS issue was discovered in DedeCMS via the component select media post wangEditor.php. This allows for potential XSS attacks. Recommendations: For DedeCMS version 5.7.111...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

Cross site scripting

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

CVE-2023-24251

CVE-2023-24251 affects WangEditor v5; an XSS vulnerability is exploitable via the /dist/index.js component. The NVD metrics describe a network-accessible issue with low impact (C/L, I/L) and user interaction required. Connected sources corroborate a cross-site scripting flaw in WangEditor v5 and ...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

wangEditor 跨站脚本漏洞

wangEditor is an open source Web rich text editor from wangEditor Inc. A security vulnerability exists in version v5 of wangEditor, which stems from a cross-site scripting XSS vulnerability...

PT-2023-19499 · Waneditor · Waneditor

Name of the Vulnerable Software and Affected Versions: WangEditor version 5 Description: A cross-site scripting XSS issue was found in WangEditor via the component /dist/index.js. Recommendations: For WangEditor version 5, update to a newer version that contains a fix for this issue...

CVE-2023-24251

WangEditor v5 was discovered to contain a cross-site scripting XSS vulnerability via the component /dist/index.js...

XSS vulnerability in wangEditor

wangEditor is a Web rich text editor . An XSS vulnerability exists in wangEditor, which can be exploited by attackers to obtain sensitive information such as user cookies...

360shitu (=0.1.0), @7revor/item-schema-sdk (=0.0.0) +929 more potentially affected by unknown CVE via wangeditor (>=2.1.23 <=4.7.9)

wangeditor NPM version =2.1.23, =1.0.27, =1.0.11, =3.1.3, =1.0.8, =0.1.8, =1.0.0, =0.0.22, =0.0.4-alpha.0, =0.0.1, =0.0.27, =0.0.103 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G7MW-5CQ6-FV82...