medium6.1
CVE-2025-15056
Quill is vulnerable to XSS via HTML export feature
Impact
A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | quill | = 2.0.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slab | Quill | Version 2.0.3 |