Skip to content
OpenAdvisories

Vendor

etaminstudio

1 known vulnerabilities.

Products

prosemirror_to_html 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2025-64501

    ProsemirrorToHtml: Cross-Site Scripting vulnerability through unescaped HTML attribute values

    ProsemirrorToHtml is a JSON converter which takes ProseMirror-compatible JSON and outputs HTML. In versions 0.2.0 and below, the `prosemirror_to_html` gem is vulnerable to Cross-Site Scripting (XSS) attacks through malicious HTML attribute values. While tag c…

    etaminstudio prosemirror_to_html prosemirror_to_html RubyGems