Skip to content

CVE record · 1 source

CVE-2026-124492

CVSS 7.6

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which inserts entity-decoded…

Vendor: JiHong88
Product: suneditor
CVSS v3.1: 7.6 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
Weakness: CWE-79

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 3h ago

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which inserts entity-decoded…

SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which inserts entity-decoded h1-h6 header textContent into the bookmark list via innerHTML without escaping.…

CVSS 7.6 CVE-2026-124492 JiHong88