https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T06:11:54.938040+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-106142 fkie_cve-2026-106142 2026-11-10T06:11:54.939110+00:00

Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0 through 16.1.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link with an unsafe URL in the Editor content, which runs when the user clicks the link.

 https://db.gcve.eu/vuln/ghsa-p3r6-vmqw-5grq GHSA-p3r6-vmqw-5grq 2026-11-10T06:11:54.939176+00:00

Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0 through 16.1.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user's browser via a link with an unsafe URL in the Editor content, which runs when the user clicks the link.