Skip to content
OpenAdvisories

Package · npm

@progress/kendo-angular-editor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-j7wp-vjj6-cp5m

    Cross-Site Scripting in @progress/kendo-angular-editor

    Kendo UI for Angular Editor Component (npm package @progress/kendo-angular-editor) before version 1.2.3 is vulnerable to Cross-Site Scripting. When the Editor content contains potentially malicious scripts in element event handlers, they get executed. Adding …

    @progress/kendo-angular-editor npm