CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/10/2021 |
| CVE-2021-28114 | 中危5.4 | Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing. | 16/07/2021 |
| CVE-2021-30109 | 中危6.1 | Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module. | 05/04/2021 |
| CVE-2020-26523 | 中危6.1 | Froala Editor before 3.2.2 allows XSS via pasted content. | 02/10/2020 |
| CVE-2019-19935 | 中危6.1 | Froala Editor before 3.2.3 allows XSS. | 07/07/2020 |