Skip to content
OpenAdvisories

Package · npm

quill

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.1
    CVE-2025-15056

    Quill 2.0.3 - Lack of data validation in HTML export allowing XSS

    A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.

    Slab Quill quill npm
  • Medium 4.2
    CVE-2021-3163

    Cross-site Scripting in quill

    A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field. Note: Researchers have claimed that this issue is not with…

    quill npm
  • Medium 6.5
    GHSA-588m-9qg5-35pq

    Reverse Tabnabbing in quill

    Versions of `quill` prior to 1.3.7 are vulnerable to [Reverse Tabnabbing](https://www.owasp.org/index.php/Reverse_Tabnabbing). The package uses `target='_blank'` in anchor tags, allowing attackers to access `window.opener` for the original page when opening l…

    quill npm