{"action":"Upgrade @wangeditor/editor to 4.7.12 or later.","affected":[{"fixed":"4.7.12","introduced":"0"}],"component":"@wangeditor/editor","cve_ids":["CVE-2022-25037"],"ecosystem":"npm","epss":0.00268,"exploited":false,"fixed_versions":["4.7.12"],"ghsa_id":"GHSA-9hfw-cvf4-5x25","id":"tcs_01M5KFFZSY11D8S578TWMPJE9D","modified_at":"2026-09-10T03:50:13.670997199Z","published_at":"2024-05-31T18:31:14Z","references":["https://osv.dev/vulnerability/GHSA-9hfw-cvf4-5x25","https://nvd.nist.gov/vuln/detail/CVE-2022-25037","https://github.com/wangeditor-team/wangEditor/issues/3870","https://github.com/wangeditor-team/wangEditor/issues/3872","https://github.com/wangeditor-team/wangEditor/commit/6257a2e166346913c34ac5cfb31b6a46e9544c5a","https://gist.github.com/Mdxjj/5cf0a31e8abf24ed688ceb5b3543516d","https://github.com/wangeditor-team/wangEditor"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-9hfw-cvf4-5x25","url":"https://osv.dev/vulnerability/GHSA-9hfw-cvf4-5x25"}],"summary":"wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function"}