Search for packages
| purl | pkg:npm/strapi-plugin-content-manager@3.2.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-yafu-6e7s-y3cw | Cross-site Scripting Strapi has stored XSS in the wysiwyg editor's preview feature. |
CVE-2020-27666
GHSA-qvp5-mm7v-4f36 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T17:21:21.030768+00:00 | GithubOSV Importer | Fixing | VCID-yafu-6e7s-y3cw | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/10/GHSA-qvp5-mm7v-4f36/GHSA-qvp5-mm7v-4f36.json | 38.6.0 |
| 2026-06-04T16:20:34.107412+00:00 | GitLab Importer | Fixing | VCID-yafu-6e7s-y3cw | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/strapi-plugin-content-manager/CVE-2020-27666.yml | 38.6.0 |