CVE-2025-15056

Published January 13th, 2026

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.

Quill is a modern WYSIWYG editor built for compatibility and extensibility

GitHub

47.1K