Approved changes feed: RSS · Atom

cpe:2.3:a:froala:froala_editor:4.1.1:*:*:*:*:*:*:*

part: a version: 4.1.1 update: *

VendorFroala (903c7bd2-a497-5329-bb38-90e91e43ee6d)
ProductFroala Editor (ce33caae-b10c-50af-adab-5b4dc1db4578)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/froala/wysiwyg-editor purl2cpe 2026-06-01 10:11:20.666639

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43263 vulnerable 2026-06-08 06:11:11.068340 Details available
A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component.
Published: 2023-09-26T00:00:00.000Z
Updated: 2024-09-23T19:49:47.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42426 vulnerable 2026-06-08 06:11:08.039814 Details available
Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.
Published: 2023-09-25T00:00:00.000Z
Updated: 2026-07-09T00:28:22.551Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.