Vendors / Froala Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Froala records in CISA KEV No Froala vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00965 · Published 2023-09-25 · No fix listed CWE-79
Priority MEDIUM 58
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01038 · Published 2023-09-14 · Fixed in 4.1.4 CWE-79
Priority MEDIUM 56
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.52037 · Published 2021-07-16 · Fixed in 3.2.7 CWE-79
Priority LOW 31
Froala Editor before 3.2.3 allows XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01847 · Published 2020-07-07 · Fixed in 3.2.3 CWE-79
Priority LOW 30
Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01224 · Published 2021-04-05 · No fix listed CWE-79
Priority LOW 29
A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00739 · Published 2023-09-26 · No fix listed CWE-79
Priority LOW 29
A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00868 · Published 2021-10-26 · Fixed in 4.0.11 CWE-79
Priority LOW 28
Froala Editor before 3.2.2 allows XSS via pasted content.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00685 · Published 2020-10-02 · Fixed in 3.2.2 CWE-79
Open these records in search → All records by CVSS severity
0 0 8 0 0
THREATIST.IORead the docs