Vulnerabilities (CVE)

Filtered by vendor Froala Subscribe
Filtered by product Froala Editor
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-42426 1 Froala 1 Froala Editor 2024-09-25 N/A 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.
CVE-2021-30109 1 Froala 1 Froala Editor 2024-02-04 4.3 MEDIUM 6.1 MEDIUM
Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module.
CVE-2020-26523 1 Froala 1 Froala Editor 2024-02-04 4.3 MEDIUM 6.1 MEDIUM
Froala Editor before 3.2.2 allows XSS via pasted content.
CVE-2019-19935 1 Froala 1 Froala Editor 2024-02-04 4.3 MEDIUM 6.1 MEDIUM
Froala Editor before 3.2.3 allows XSS.