CVE-2024-51434

Impact

Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.

Affected packages

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434/
• https://github.com/advisories/GHSA-549p-5c7f-c5p4
• https://nvd.nist.gov/vuln/detail/CVE-2024-51434
• https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434