Froala Froala Editor — known CVE vulnerabilities

Every CVE whose affected-product data names Froala Froala Editor, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2023-43263 — CVSS 6.1 (medium): A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component.
• CVE-2020-22864 — CVSS 6.1 (medium): A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute…
• CVE-2020-26523 — CVSS 6.1 (medium): Froala Editor before 3.2.2 allows XSS via pasted content.
• CVE-2023-42426 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert…
• CVE-2019-19935 — CVSS 6.1 (medium): Froala Editor before 3.2.3 allows XSS.
• CVE-2021-30109 — CVSS 6.1 (medium): Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent…
• CVE-2021-28114 — CVSS 5.4 (medium): Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.
• CVE-2023-41592 — CVSS 5.4 (medium): Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.