Quill is vulnerable to XSS via HTML export feature - CVE-2025-15056

[devanshraghuvanshi]

Related CVE: CVE-2025-15056
GHSA: GHSA-v3m3-f69x-jf25
Affected versions: ≤ 2.0.3
Severity: Medium (expanded scope from original "Low" rating)
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation)
npm audit output:

quill ≤2.0.3 
Severity: moderate
Quill is vulnerable to XSS via HTML export feature
fix available via `npm audit fix`

[Pietrucci-Blacher]

Dupe for #4776 and #4774