npm/react-draft-wysiwyg CVE-2025-3191: medium 6.1, EPSS 0.24%
React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.15.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fq5x-7292-2p5r
- https://nvd.nist.gov/vuln/detail/CVE-2025-3191
- https://gist.github.com/th4s1s/175ae4b2632096059b42377dd6c49d47
- https://github.com/jpuri/react-draft-wysiwyg
- https://security.snyk.io/vuln/SNYK-JS-REACTDRAFTWYSIWYG-8515884
CVE-2025-3191 · published · modified · JSON