Skip to content
OpenAdvisories

Package · npm

froala-editor

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 6.1
    CVE-2024-51434

    Froala WYSIWYG editor allows cross-site scripting (XSS)

    Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.

    froala-editor froala/wysiwyg-editor npm Packagist
  • Medium 5.4
    CVE-2023-41592

    Froala Editor Cross-site Scripting vulnerability

    Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

    froala-editor froala/wysiwyg-editor npm Packagist
  • Medium 6.1
    CVE-2020-22864

    Cross site scripting in froala-editor

    A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML.

    froala-editor npm
  • Medium 6.1
    CVE-2021-30109 Public exploit

    Cross-site Scripting in Froala Editor

    Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module.

    froala-editor npm
  • Medium 6.1
    CVE-2019-19935

    DOM-based cross-site scripting in Froala Editor

    Froala Editor before 3.2.3 allows XSS.

    froala-editor npm