Lucas 5O4R3S

**Name of the Vulnerable Software and Affected Versions** Summernote Rich Text Editor versions 0.8.18 and before **Description** The issue allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component. This enables the attacker to perform actions such as injecting malicious scripts into the application. **Recommendations** For Summernote Rich Text Editor versions 0.8.18 and before, consider disabling the insert link function in the editor component until a patch is available. Restrict access to the editor component to minimize the risk of exploitation. Avoid using the insert link function in the affected editor component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Froala Editor versions 4.0.1 through 4.1.1 **Description** The issue is related to a cross-site scripting (XSS) vulnerability. Cross-site scripting is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or control. **Recommendations** For Froala Editor versions 4.0.1 through 4.1.1, update to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.