xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view.

Published Nov 3, 2018 · Updated Aug 5, 2024 · Assigned by mitre