Known Vulnerabilities for What You See Is What You Get Editor by Froala
Listed below are 1 of the newest known vulnerabilities associated with "What You See Is What You Get Editor" by "Froala".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-86995 json | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the reposit... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-86644 json | A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web_src/pu... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-86082 json | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforce... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-86081 json | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation match... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-86076 json | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer ... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-85600 json | Grav Admin (getgrav/grav-plugin-admin2) versions <= 2.0.19 contain a stored cross-site scripting vulnerability in the tHtml()... | Not Provided | 2026-09-04 | 2026-09-05 |
| CVE-2026-85166 json | n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes that ... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-84772 json | Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions. | Not Provided | 2026-09-02 | 2026-09-03 |
| CVE-2026-84695 json | BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accepts unv... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-84221 json | The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing ... | Not Provided | 2026-09-05 | 2026-09-06 |