Froala WYSIWYG Editor XSS Vulnerability

MÉDIO 6.1CVE-2020-26523 · GHSA-qrhq-x7xh-2784 · Published 02/10/2020 · updated 17/06/2026

Em resumo

CVE-2020-26523 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta froala/wysiwyg-editor, froala editor (froala).
Chance de exploração nos próximos 30 dias (EPSS): 0.69%, maior que 52.6% das vulnerabilidades.
Correção: atualize para 3.2.2 ou posterior.

Package	Affected versions	Patched versions
froala/wysiwyg-editor Packagist	`< 3.2.2`	`3.2.2`
froala editor froala	`< 3.2.2`	`3.2.2`

Froala Editor before 3.2.2 allows XSS via pasted content.

NVD description

Froala Editor before 3.2.2 allows XSS via pasted content.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.