CVE-2020-22864
1 advisory.
npm/froala-editor CVE-2020-22864: medium 6.1
Cross site scripting in froala-editor
Action: Upgrade froala-editor to 4.0.11 or later.
npm i froala-editor@4.0.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.11 | - |
Fixed versions
| 4.0.11 |
Sources
- osv: GHSA-97x5-cc53-cv4v
- https://nvd.nist.gov/vuln/detail/CVE-2020-22864
- https://github.com/froala/wysiwyg-editor/issues/3880
- https://github.com/418sec/wysiwyg-editor/pull/1
- https://github.com/froala/wysiwyg-editor/pull/3911
- https://github.com/froala/wysiwyg-editor
- https://github.com/froala/wysiwyg-editor/releases/tag/v4.0.11
- https://www.youtube.com/watch?v=WE3b1iSnWJY
CVE-2020-22864 · published · modified · JSON