Login Request a demo
FE
Product
Froala Editor
by Froala · last CVE Sep 27, 2023
8
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 0Medium 8Low 0
Severity
All severities8Critical0High0Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Froala Editor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-43263
6.1
1%
Sep 27
A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component
Affected: 4.1.1
CVE-2023-42426
6.1
1%
Sep 25
Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image'…
Affected: 4.1.1
CVE-2020-22864
6.1
1%
Oct 26
A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML
Affected: 3.1.0
CVE-2021-30109
6.1
1%
Apr 5
Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS)
Affected: 3.2.6
CVE-2020-26523
6.1
1%
Oct 2
Froala Editor before 3.2.2 allows XSS via pasted content
Affected: before 3.2.2
CVE-2019-19935
6.1
2%
Jul 7
Froala Editor before 3.2.3 allows XSS
Affected: before 3.2.3
CVE-2023-41592
5.4
1%
Sep 14
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability
Affected: 4.0.1 through 4.1.1
CVE-2021-28114
5.4
52%
Jul 16
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing
Affected: before 3.2.7
Showing 8