Skip to content
Noroxi

froala records

9 published records for vendor froala.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
55.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2021-28114
    37Monitor

    Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.

    MediumCVSS 5.4No exploitEPSS 52%

    froala · froala editorJul 16, 2021

  • CVE-2019-19935
    25Monitor

    Froala Editor before 3.2.3 allows XSS.

    MediumCVSS 6.1No exploitEPSS 1%

    froala · froala editorJul 7, 2020

  • CVE-2021-30109
    24Monitor

    Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS).

    MediumCVSS 6.1Proof of conceptEPSS 1%

    froala · froala editorApr 5, 2021

  • CVE-2023-42426
    24Monitor

    Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert l

    MediumCVSS 6.1Proof of conceptEPSS 0%

    froala · froala editorSep 25, 2023

  • CVE-2020-22864
    24Monitor

    A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary

    MediumCVSS 6.1No exploitEPSS 0%

    froala · froala editorOct 26, 2021

  • CVE-2023-43263
    24Monitor

    A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component.

    MediumCVSS 6.1Proof of conceptEPSS 0%

    froala · froala editorSep 27, 2023

  • CVE-2020-26523
    24Monitor

    Froala Editor before 3.2.2 allows XSS via pasted content.

    MediumCVSS 6.1No exploitEPSS 0%

    froala · froala editorOct 2, 2020

  • CVE-2024-51434
    24Monitor

    Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.

    MediumCVSS 6.1No exploitEPSS 0%

    Nov 7, 2024

  • CVE-2023-41592
    21Monitor

    Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

    MediumCVSS 5.4No exploitEPSS 1%

    froala · froala editorSep 14, 2023