Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 27/09/2023 Updated: 29/09/2023

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 0

A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows malicious users to execute arbitrary code via the Markdown component.

Vulnerable Product	Search on Vulmon	Subscribe to Product
froala froala editor 4.1.1

Repository for CVE-2023-43263 vulnerability.

CVE ID: CVE-2023-43263 Vulnerability Type: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in Froala Editor v411 allows attackers to execute arbitrary code via the Markdown component Steps to reproduce: Enter payload in markdown component input: <a title ="a <img src=x onerror=consolelog(documentcookie)>xss</a&a

CWE-79 https://www.youtube.com/watch?v=-dXipo_q7tM https://github.com/b0marek/CVE-2023-43263 https://nvd.nist.gov https://github.com/b0marek/CVE-2023-43263

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-43263

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect