Slab

slab

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Quill

quill

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-15056 1Slab 1Quill Jun 17, 2026 Jan 13, 2026 5.1 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.
CVE-2021-3163 1Slab 1Quill Jun 17, 2026 Apr 12, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field. Note: Researchers h...Show more A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended behavior in a web browserShow less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-15056

1Slab

1Quill

Jun 17, 2026

Jan 13, 2026

5.1 MEDIUM· v4

6.1 MEDIUM· v3

N/A· v2

A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.

CVE-2021-3163

1Slab

1Quill

Jun 17, 2026

Apr 12, 2021

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended behavior in a web browserShow less