Froala WYSIWYG editor allows cross-site scripting (XSS)
Inconsistent tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.
Advisories for Composer/Froala/Wysiwyg-Editor package
2024
2023
Froala Editor Cross-site Scripting vulnerability
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.
2022
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Froala Editor before 3.2.2 allows XSS via pasted content.
2021
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.