tocsin

CVE-2024-51434

2 advisories.

npm/froala-editor CVE-2024-51434: medium 6.1, EPSS 0.38%

Froala WYSIWYG editor allows cross-site scripting (XSS)

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.3.0

Fixed versions

No fixed version in the source.

Sources

CVE-2024-51434 · published · modified · JSON

Packagist/froala/wysiwyg-editor CVE-2024-51434: medium 6.1, EPSS 0.38%

Froala WYSIWYG editor allows cross-site scripting (XSS)

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.3.0

Fixed versions

No fixed version in the source.

Sources

CVE-2024-51434 · published · modified · JSON