Package · Packagist

froala/wysiwyg-editor

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 6.1

CVE-2024-51434

Froala WYSIWYG editor allows cross-site scripting (XSS)

Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.

froala-editor froala/wysiwyg-editor npm Packagist

Nov 7, 2024
Medium 5.4

CVE-2023-41592

Froala Editor Cross-site Scripting vulnerability

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

froala-editor froala/wysiwyg-editor npm Packagist

Sep 14, 2023
Medium 5.4

CVE-2021-28114 EPSS 52%

Cross-site Scripting in Froala WYSIWYG Editor

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.

froala/wysiwyg-editor Packagist

Jul 16, 2021
Medium 6.1

CVE-2020-26523

Froala WYSIWYG Editor XSS Vulnerability

Froala Editor before 3.2.2 allows XSS via pasted content.

froala/wysiwyg-editor Packagist

Oct 2, 2020