Threats tagged 'ghsa-h8r9-r2r8-gxj7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.3	CVE-2026-124492SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's High8.32026-11-08GCVE DatabaseCVE-2026-124492 SunEditor versions before 3.4.0 have a stored cross-site scripting (XSS) vulnerability in the ModalAnchorEditor's #createBookmarkList function. This flaw arises because entity-decoded header text (h1-h6) is inserted into the bookmark list using innerHTML without proper escaping. An attacker can embed HTML-encoded payloads in editor headers that execute JavaScript when a user opens the link modal and types # in the URL input. Report on CVE-2026-124492 Vulnerability CWE-79 #ghsa-h8r9-r2r8-gxj7	GCVE Database	2026-11-08

Page 1 of 1