~ / search / GHSA-qrhq-x7xh-2784

GHSA-qrhq-x7xh-2784

Froala WYSIWYG Editor XSS Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-26523

Packages

EcosystemPackageAffectedFixed in
Packagist froala/wysiwyg-editor < 3.2.2 3.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

Froala Editor before 3.2.2 allows XSS via pasted content.

References

External links from the advisory. They lead to third-party sites.