Threats tagged 'ghsa-p3r6-vmqw-5grq'

A Cross-Site Scripting (XSS) vulnerability exists in the Editor component (@progress/kendo-react-editor) of Progress Software KendoReact versions 2.7.0 through 16.1.0. This flaw allows a low-privileged attacker who can supply content to the Editor to execute arbitrary JavaScript in another user's browser when the user clicks a crafted link containing an unsafe URL in the Editor content.