Froala WYSIWYG Editor XSS Vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-26523 · ADVISORY
• froala.com/wysiwyg-editor/changelog · WEB
• froala/wysiwyg-editor · PACKAGE
• froala.com/wysiwyg-editor/changelog · Release Notes

Más vulnerabilidades de froala/wysiwyg-editor

• CVE-2024-51434MEDIO 6.1Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.
• CVE-2023-41592MEDIO 5.4Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.
• CVE-2021-28114MEDIO 5.4Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.