CVE-2023-41592: Froala Editor

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.

Affected products

• Froala Froala Editor: from 4.0.1, up to and including 4.1.1

Published 2023-09-14. Last modified 2026-06-17.