Threats tagged 'ghsa-fvm2-c629-pcjf'

SunEditor versions from 3.0.0 up to but not including 3.4.0 contain a stored cross-site scripting (XSS) vulnerability in the html.clean() function. This function rebuilds iframes from JSON data without properly filtering certain attributes like srcdoc or uppercase SRC keys. An attacker can exploit this by injecting crafted HTML via paste, html.set, or html.insert methods, leading to script execution in the context of the host page when the content is loaded or pasted.