Threats tagged 'ghsa-m98v-phcq-735w'

SunEditor versions before 3.4.0 have a stored cross-site scripting (XSS) vulnerability in the FileUpload plugin's create() method. This flaw occurs because server-returned file names are assigned to innerHTML without proper escaping, allowing malicious HTML content to bypass sanitization. Attackers can exploit this by uploading files with crafted names containing HTML and JavaScript, which execute in users' browsers when the content or gallery items are loaded, potentially leading to session theft.