Sceditor

sceditor

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Sceditor

sceditor

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-25581 1Sceditor 1Sceditor Jun 17, 2026 Feb 6, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. Prior to 3.2.1, if an attacker has the ability control configuration options passed to sceditor.create(), like emoticons, charset, etc. then it's possible for th...Show more SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. Prior to 3.2.1, if an attacker has the ability control configuration options passed to sceditor.create(), like emoticons, charset, etc. then it's possible for them to trigger an XSS attack due to lack of sanitisation of configuration options. This vulnerability is fixed in 3.2.1.Show less
CVE-2019-19466 1Sceditor 1Sceditor Jun 17, 2026 Dec 5, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 SCEditor 2.1.3 allows XSS.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2026-25581

1Sceditor

Jun 17, 2026

Feb 6, 2026

N/A· v4

5.4 MEDIUM· v3

N/A· v2

SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. Prior to 3.2.1, if an attacker has the ability control configuration options passed to sceditor.create(), like emoticons, charset, etc. then it's possible for them to trigger an XSS attack due to lack of sanitisation of configuration options. This vulnerability is fixed in 3.2.1.Show less

CVE-2019-19466

1Sceditor

Jun 17, 2026

Dec 5, 2019

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

SCEditor 2.1.3 allows XSS.