Filtered by vendor React Draft Wysiwyg Project Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-31712 1 React Draft Wysiwyg Project 1 React Draft Wysiwyg 2024-11-21 5.4 Medium
react-draft-wysiwyg (aka React Draft Wysiwyg) before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS.