Vulnerabilities (CVE)

Filtered by vendor Froala Subscribe
Filtered by product Froala Editor
Total 6 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-43263 1 Froala 1 Froala Editor 2024-11-21 N/A 6.1 MEDIUM
A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component.
CVE-2023-42426 1 Froala 1 Froala Editor 2024-11-21 N/A 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.
CVE-2023-41592 1 Froala 1 Froala Editor 2024-11-21 N/A 5.4 MEDIUM
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVE-2021-30109 1 Froala 1 Froala Editor 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module.
CVE-2020-26523 1 Froala 1 Froala Editor 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Froala Editor before 3.2.2 allows XSS via pasted content.
CVE-2019-19935 1 Froala 1 Froala Editor 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Froala Editor before 3.2.3 allows XSS.