Threats tagged 'ghsa-rh37-hh4h-pg37'

A Cross-Site Scripting (XSS) vulnerability exists in the Editor component (@progress/kendo-angular-editor) of Progress Software Kendo UI for Angular versions prior to 25.3.0. This flaw allows a low-privileged attacker who can supply content to the Editor to execute arbitrary JavaScript in another user's browser when the user interacts with a crafted link or image with an unsafe URL in the Editor content.