Vulnerabilities

TI-2023-23161 CVE-2023-43263 · GHSA-2vwj-xrr6-mmcf

A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to…

LOW 29

A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00739 Published 2023-09-26 No fix listed CWE-79

TI-2023-22596 CVE-2023-42426 · GHSA-fp88-rr3f-rchj

Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote…

MEDIUM 60

Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00965 Published 2023-09-25 No fix listed CWE-79

TI-2023-22039 CVE-2023-41592 · GHSA-hvpq-7vcc-5hj5

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

MEDIUM 58

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01038 Published 2023-09-14 Fixed in 4.1.4 CWE-79

TI-2020-14412 CVE-2020-22864 · GHSA-97x5-cc53-cv4v

A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG…

LOW 29

A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00868 Published 2021-10-26 Fixed in 4.0.11 CWE-79

TI-2021-09350 CVE-2021-28114 · GHSA-rr6v-h7m8-wc9f

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.

MEDIUM 56

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.52037 Published 2021-07-16 Fixed in 3.2.7 CWE-79

TI-2021-10659 CVE-2021-30109 · GHSA-cq6w-w5rj-p9x8

Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS).

LOW 30

Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01224 Published 2021-04-05 No fix listed CWE-79

TI-2020-16166 CVE-2020-26523 · GHSA-qrhq-x7xh-2784

Froala Editor before 3.2.2 allows XSS via pasted content.

LOW 28

Froala Editor before 3.2.2 allows XSS via pasted content.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00685 Published 2020-10-02 Fixed in 3.2.2 CWE-79

TI-2019-14377 CVE-2019-19935 · GHSA-h236-g5gh-vq6c

Froala Editor before 3.2.3 allows XSS.

LOW 31

Froala Editor before 3.2.3 allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01847 Published 2020-07-07 Fixed in 3.2.3 CWE-79

Vulnerabilities

Filters