Archive
24 April 2021
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 5.4
Cross-site Scripting in React Draft Wysiwyg
react-draft-wysiwyg (aka React Draft Wysiwyg) before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS.