{"action":"Upgrade froala-editor to 4.0.11 or later.","affected":[{"fixed":"4.0.11","introduced":"0"}],"component":"froala-editor","cve_ids":["CVE-2020-22864"],"ecosystem":"npm","epss":0.00868,"exploited":false,"fixed_versions":["4.0.11"],"ghsa_id":"GHSA-97x5-cc53-cv4v","id":"tcs_01M5KFF5SQ5XXMC5VWRA5RBNQH","modified_at":"2023-11-08T04:03:02.558195Z","published_at":"2021-10-28T23:14:06Z","references":["https://osv.dev/vulnerability/GHSA-97x5-cc53-cv4v","https://nvd.nist.gov/vuln/detail/CVE-2020-22864","https://github.com/froala/wysiwyg-editor/issues/3880","https://github.com/418sec/wysiwyg-editor/pull/1","https://github.com/froala/wysiwyg-editor/pull/3911","https://github.com/froala/wysiwyg-editor","https://github.com/froala/wysiwyg-editor/releases/tag/v4.0.11","https://www.youtube.com/watch?v=WE3b1iSnWJY"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-97x5-cc53-cv4v","url":"https://osv.dev/vulnerability/GHSA-97x5-cc53-cv4v"}],"summary":"Cross site scripting in froala-editor"}