https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 06:11:55 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-106142 <p>Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0 through 16.1.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user&#39;s browser via a link with an unsafe URL in the Editor content, which runs when the user clicks the link.</p> <p>Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0 through 16.1.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user&#39;s browser via a link with an unsafe URL in the Editor content, which runs when the user clicks the link.</p> https://db.gcve.eu/vuln/fkie_cve-2026-106142 https://db.gcve.eu/vuln/ghsa-p3r6-vmqw-5grq <p>Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0 through 16.1.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user&#39;s browser via a link with an unsafe URL in the Editor content, which runs when the user clicks the link.</p> <p>Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0 through 16.1.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user&#39;s browser via a link with an unsafe URL in the Editor content, which runs when the user clicks the link.</p> https://db.gcve.eu/vuln/ghsa-p3r6-vmqw-5grq