Description
Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | froala-editor | <= 4.3.0 | — | GHSA-549p-5c7f-c5p4 |
| Packagist | froala/wysiwyg-editor | <= 4.3.0 | — | GHSA-549p-5c7f-c5p4 |