Medium · 6.1 CVE-2021-27524 EUVD-2023-2316GHSA-jfrf-vv54-j2jg

Margox Braft-Editor Cross-site Scripting Vulnerability

Published Aug 11, 2023 · Updated Oct 9, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embed media feature.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
npm	braft-editor	<= 2.3.8	—	GHSA-jfrf-vv54-j2jg

References

https://github.com/margox/braft-editor/issues/880