Threats tagged 'ghsa-r6ff-j3f6-wm7p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2025-71464@kolkov/angular-editor before 3.0.4 contains a cross-site scripting vulnerability in toggleEditorMode() that assigns Medium5.32026-11-14GCVE DatabaseCVE-2025-71464 @kolkov/angular-editor versions before 3.0.4 have a cross-site scripting (XSS) vulnerability in the toggleEditorMode() function. This function assigns source view text directly to innerHTML without sanitization, allowing attackers to inject HTML with event handlers like img onerror. When users toggle views, the malicious script executes in the application's origin. Report on CVE-2025-71464 Vulnerability CWE-79 #ghsa-r6ff-j3f6-wm7p	GCVE Database	2026-11-14

Page 1 of 1