Approved changes feed: RSS · Atom

cpe:2.3:a:froala:froala_editor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFroala (903c7bd2-a497-5329-bb38-90e91e43ee6d)
ProductFroala Editor (ce33caae-b10c-50af-adab-5b4dc1db4578)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/froala/wysiwyg-editor purl2cpe 2026-06-01 10:11:20.666476

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41592 vulnerable 2026-06-08 06:11:06.216749 Details available
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.
Published: 2023-09-14T00:00:00.000Z
Updated: 2024-09-25T18:57:00.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28114 vulnerable 2026-06-08 05:31:22.956482 Details available
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.
Published: 2021-07-16T12:16:18.000Z
Updated: 2024-08-03T21:33:17.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26523 vulnerable 2026-06-08 05:23:51.268585 Details available
Froala Editor before 3.2.2 allows XSS via pasted content.
Published: 2020-10-02T06:29:45.000Z
Updated: 2024-08-04T15:56:04.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19935 vulnerable 2026-06-08 05:13:24.069684 Details available
Froala Editor before 3.2.3 allows XSS.
Published: 2020-07-07T15:40:15.000Z
Updated: 2024-08-05T02:32:10.135Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.