Search for packages
| purl | pkg:npm/froala-editor@2.2.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3mjr-5k5j-h3ew
Aliases: CVE-2020-22864 GHSA-97x5-cc53-cv4v |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML. |
Affected by 2 other vulnerabilities. |
|
VCID-9153-xwpf-skgy
Aliases: CVE-2024-51434 GHSA-549p-5c7f-c5p4 |
Froala WYSIWYG editor allows cross-site scripting (XSS) Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier. | There are no reported fixed by versions. |
|
VCID-9yss-6cdd-9bge
Aliases: CVE-2019-19935 GHSA-h236-g5gh-vq6c |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Froala Editor before 3.2.3 allows XSS. |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-je93-db45-akd3
Aliases: CVE-2021-30109 GHSA-cq6w-w5rj-p9x8 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module. |
Affected by 2 other vulnerabilities. |
|
VCID-pmnu-pk72-qybr
Aliases: CVE-2021-28114 GHSA-rr6v-h7m8-wc9f |
Cross-site Scripting Froala WYSIWYG Edit is affected by XSS due to a namespace confusion during parsing. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||