Skip to content
OpenAdvisories

Package · npm

@udecode/plate-media

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2024-40631

    Cross-site Scripting (XSS) in media embed element when using custom URL parsers in plate media

    Plate media is an open source, rich-text editor for React. Editors that use `MediaEmbedElement` and pass custom `urlParsers` to the `useMediaState` hook may be vulnerable to XSS if a custom parser allows `javascript:`, `data:` or `vbscript:` URLs to be embedd…

    udecode plate @udecode/plate-media npm