CVE-2025-15056
Quill 2.0.3 - Lack of data validation in HTML export allowing XSS
Summary
Quill 2.0.3 - Lack of data validation in HTML export allowing XSS
Original description
The description as published by the source.
A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS).
This issue affects Quill: 2.0.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web registry.npmjs.org