Skip to content

v2.47.11

Choose a tag to compare

View all tags
@JiHong88 JiHong88 released this 15 Jul 16:30
2.47.11
7fd007a

[LEGACY] Release v2.47.11

🔒 This release includes an important security patch regarding an XSS vulnerability.

Security Fixes (v2.47.11)

  • Fixed XSS Sanitization Bypass in Namespaced HTML Elements
    • Addressed an issue where crafted custom or namespaced tags could preserve executable event-handler attributes.
    • Improved sanitization of unsafe attributes, nested elements, and JavaScript URI schemes.
    • This issue could potentially allow stored or reflected XSS when malicious content is rendered or interacted with.
    • Affects SUNEDITOR <= 2.47.10.

Users are strongly encouraged to upgrade to v2.47.11.

Special thanks to the security researcher for the responsible disclosure. [#1646] @Adyej999

Contributors

Adyej999
Assets 2
Loading