GHSA-v3m3-f69x-jf25
Medium · 6.1CVSS
6.1
EPSS
—
Published
Jan 13, 2026
CISA due date
—
The record
Quill is vulnerable to XSS via HTML export feature
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | quill | 2.0.3 | No fix |
Related vulnerabilities
- CVE-2025-15056 A lack of data validation vulnerability in the HTML export feature in Quill in allows… Same vulnerability
- CVE-2021-3163 A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute… Also affects quill
- CVE-2026-114577 A vulnerability was found in oretnom23 php-travel-agency-system. CWE-74
- CVE-2026-114575 A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. CWE-74
- CVE-2026-112150 A security flaw has been discovered in vraj404 Criminal-Management-System up to… CWE-74
- CVE-2026-112141 A vulnerability was determined in satya-vinay Events-Management-System up to… CWE-74
- CVE-2026-112100 A vulnerability was determined in DeepPavlov up to 1.7.0. CWE-74
- CVE-2026-112087 A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. CWE-74