Vendors / Slab Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Slab records in CISA KEV No Slab vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 30
A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01311 · Published 2021-04-12 · No fix listed CWE-79
Priority LOW 23
A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS).
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00269 · Published 2026-01-13 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 0 2 0 0
