Description
Froala Editor before 3.2.2 allows XSS via pasted content.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | froala/wysiwyg-editor | < 3.2.2 | 3.2.2 | GHSA-qrhq-x7xh-2784 |
Medium · 6.1
CVE-2020-26523
EUVD-2022-5026GHSA-qrhq-x7xh-2784
Froala WYSIWYG Editor XSS Vulnerability
Published Oct 2, 2020 · Updated Aug 4, 2024 · Assigned by mitre