Vulnerability CVE-2023-42426
Published: 2023-09-25

Description:
Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component.

 References:
http://froala.com
https://www.youtube.com/watch?v=Me33Dx1_XqQ
https://github.com/b0marek/CVE-2023-42426
Copyright 2026, cxsecurity.com

 

Back to Top