Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froala/wysiwyg-editor.
Advisories for Composer/Froala/Wysiwyg-Editor package
2023
2022
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Froala Editor before 3.2.2 allows XSS via pasted content.
2021
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.