← Back

Lexical

lexical

Vendor: Facebook • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-30792
1Facebook
1Lexical
Jun 17, 2026
Apr 29, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources.