CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/10/2021 |
| CVE-2021-28114 | MEDIUM5.4 | Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing. | 16/07/2021 |
| CVE-2021-30109 | MEDIUM6.1 | Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module. | 05/04/2021 |
| CVE-2020-26523 | MEDIUM6.1 | Froala Editor before 3.2.2 allows XSS via pasted content. | 02/10/2020 |
| CVE-2019-19935 | MEDIUM6.1 | Froala Editor before 3.2.3 allows XSS. | 07/07/2020 |