Vulnerabilities (CVE)

Filtered by vendor React Draft Wysiwyg Project Subscribe
Filtered by product React Draft Wysiwyg
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-31712 1 React Draft Wysiwyg Project 1 React Draft Wysiwyg 2024-02-28 3.5 LOW 5.4 MEDIUM
react-draft-wysiwyg (aka React Draft Wysiwyg) before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS.