Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-3163
6.1
MEDIUMCVSS v3
Published
April 12, 2021
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended behavior in a web browser
slab/quill
GitHubQuill is a modern WYSIWYG editor built for compatibility and extensibility
GitHubQuill is a modern WYSIWYG editor built for compatibility and extensibility= 4.8.0, <= 1.3.7NVD