- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 5 · 1 medium
- Registry
- npm
Advisories 5
- CVE-2024-51434Medium 6.1
Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.
Affected: through 4.3.0.
- CVE-2023-41592Unrated
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.
Affected: from 4.0.1, fixed in 4.1.4.
- CVE-2020-22864Unrated
A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute…
Affected: fixed in 4.0.11.
- CVE-2021-30109Unrated
Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS).
Affected: through 3.2.6.
- CVE-2019-19935Unrated
Froala Editor before 3.2.3 allows XSS.
Affected: fixed in 3.2.3.