CVE-2023-42426

MEDIUM 6.1CVE-2023-42426 · Published 25/09/2023 · updated 09/07/2026

In short

CVE-2023-42426 is a MEDIUM (CVSS 6.1) vulnerability affecting froala editor (froala).
Chance of exploitation in the next 30 days (EPSS): 0.97%, higher than 61.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
froala editor froala	`= 4.1.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.

References

b0marek/CVE-2023-42426 · Exploit
youtube.com/watch · Exploit

More vulnerabilities in froala editor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

froala editor

froala

= 4.1.1

No fix yet

More vulnerabilities in froala editor

See all →