https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:20:07 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2025-3191 <p>All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting (XSS) via the Embedded button which will then result in saving the payload in the &lt;iframe&gt; tag.</p> <p>All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting (XSS) via the Embedded button which will then result in saving the payload in the &lt;iframe&gt; tag.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-3191 https://vulnerability.circl.lu/vuln/ghsa-fq5x-7292-2p5r <p><strong>Affected:</strong> npm: react-draft-wysiwyg</p> <p>All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting (XSS) via the Embedded button which will then result in saving the payload in the &lt;iframe&gt; tag.</p> <p><strong>Affected:</strong> npm: react-draft-wysiwyg</p> <p>All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting (XSS) via the Embedded button which will then result in saving the payload in the &lt;iframe&gt; tag.</p> https://vulnerability.circl.lu/vuln/ghsa-fq5x-7292-2p5r