Medium · 5.4 CVE-2023-41592 EUVD-2023-2529GHSA-hvpq-7vcc-5hj5

Froala Editor Cross-site Scripting vulnerability

Published Sep 14, 2023 · Updated Sep 25, 2024 · Assigned by mitre

Description

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

Ecosystem	Package	Affected	Fixed	Record
npm	froala-editor	>= 4.0.1, < 4.1.4	4.1.4	GHSA-hvpq-7vcc-5hj5
Packagist	froala/wysiwyg-editor	>= 4.0.1, < 4.1.4	4.1.4	GHSA-hvpq-7vcc-5hj5