VendorsFroalafroala_editor4.1.1
Vulnerabilities

Froala Froala Editor 4.1.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-42426
Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.
Published 2023-09-25 · Modified
6.1EPSS 0.009
CVE-2023-43263
A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component.
Published 2023-09-26 · Modified
6.1EPSS 0.007