First published: Thu Sep 14 2023(Updated: )
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
composer/froala/wysiwyg-editor | >=4.0.1<=4.1.3 | 4.1.4 |
Froala WYSIWYG Editor | >=4.0.1<=4.1.1 | |
npm/froala-editor | >=4.0.1<=4.1.3 | 4.1.4 |
>=4.0.1<=4.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for Froala Editor is CVE-2023-41592.
The severity of CVE-2023-41592 is medium with a CVSS score of 5.4.
The affected software versions for Froala Editor range from 4.0.1 to 4.1.1.
The vulnerability in Froala Editor is a cross-site scripting (XSS) vulnerability.
Some references for more information about the vulnerability include: [1] [2] [3]