{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.3.0"}],"component":"froala/wysiwyg-editor","cve_ids":["CVE-2024-51434"],"ecosystem":"Packagist","epss":0.00375,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-549p-5c7f-c5p4","id":"tcs_01M5KEVJS14KMXQ8FMVT28P63H","modified_at":"2025-03-14T19:12:19.686735Z","published_at":"2024-11-08T00:30:45Z","references":["https://osv.dev/vulnerability/GHSA-549p-5c7f-c5p4","https://nvd.nist.gov/vuln/detail/CVE-2024-51434","https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434","https://github.com/froala/wysiwyg-editor"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-549p-5c7f-c5p4#Packagist/froala/wysiwyg-editor","url":"https://osv.dev/vulnerability/GHSA-549p-5c7f-c5p4"}],"summary":"Froala WYSIWYG editor allows cross-site scripting (XSS)"}