CVE-2020-4061 — Cross-site Scripting in OctoberPotential self-XSS when pasting content from malicious websites
In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attac…
Published: 2020-07-02 · CVSS: 3.7 · CVSS 3.1
In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7