CVE-2023-42426

6.1 mediumEPSS 1.0%

Medium (6.1) in froala froala editor. EPSS 1.0% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-09-25
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

froala:froala_editor

References

https://github.com/b0marek/CVE-2023-42426
https://www.youtube.com/watch?v=Me33Dx1_XqQ
https://github.com/b0marek/CVE-2023-42426
https://www.youtube.com/watch?v=Me33Dx1_XqQ

Check your stack JSON