GHSA-hvpq-7vcc-5hj5

Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/09/GHSA-hvpq-7vcc-5hj5/GHSA-hvpq-7vcc-5hj5.json

Aliases

• CVE-2023-41592

Published

2023-09-15T00:30:29Z

Modified

2023-09-20T22:35:11.646149Z

Details

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-41592
• https://github.com/froala/wysiwyg-editor
• https://hacker.soarescorp.com/cve/2023-41592/
• https://owasp.org/Top10/A03_2021-Injection/
• https://owasp.org/www-project-top-ten/