~ / search / GHSA-v3m3-f69x-jf25

GHSA-v3m3-f69x-jf25

Quill is vulnerable to XSS via HTML export feature

Source: GitHub Advisory Database (reviewed) Low CVE-2025-15056

Packages

EcosystemPackageAffectedFixed in
npm quill 2.0.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.

References

External links from the advisory. They lead to third-party sites.