Description
Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | strapi-plugin-content-manager | < 3.2.5 | 3.2.5 | GHSA-qvp5-mm7v-4f36 |
Medium · 5.4
CVE-2020-27666
EUVD-2020-1436GHSA-qvp5-mm7v-4f36
Cross-site Scripting in Strapi
Published Oct 22, 2020 · Updated Aug 4, 2024 · Assigned by mitre