GitHub Advisoryadvisory · npm

GHSA-9hfw-cvf4-5x25 wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function

MEDIUM Published 2024-05-31 Modified 2026-06-11 Official page ↗
Aliases
CVE-2022-25037
Ecosystem
npm
Packages
@wangeditor/editor
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Reviewed
2024-06-02

Affected packages

• npm @wangeditor/editor: < 4.7.12 → fixed in 4.7.12

Description

There is a cross-site scripting (XSS) issue in wangEditor via the image upload function in version 4.7.11. This issue has been fixed in version 4.7.12.

Related

Alias · CVE (1)

  • CVE-2022-25037 An issue in wanEditor v4.7.11 and fixed in v.4.7.12 and v.5 was discovered to contain a cross-site scripting (XSS) vulnerability via the… vulnerability

References