{"affected":[{"defaultStatus":"unaffected","ecosystem":"npm","packageName":"%40kolkov/angular-editor","product":"angular-editor","source":"CNA: VulnCheck","vendor":"kolkov","versions":[{"lessThan":"3.0.4","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"3.0.4","versionType":"semver"}]}],"cveId":"CVE-2025-71464","cwes":["CWE-79"],"description":"@kolkov/angular-editor before 3.0.4 contains a cross-site scripting vulnerability in toggleEditorMode() that assigns source view text to innerHTML without DomSanitizer sanitization. Attackers can induce users to paste HTML with event handlers such as img onerror into source mode, executing script in the application's origin when toggling views.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","version":"4.0"},{"score":6.1,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794659577503,"publishedAt":1794659577503,"references":[{"source":"CNA: VulnCheck","tags":["issue-tracking"],"url":"https://github.com/kolkov/angular-editor/issues/580"},{"source":"CNA: VulnCheck","tags":["issue-tracking","patch"],"url":"https://github.com/kolkov/angular-editor/pull/587"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/kolkov/angular-editor/commit/1b6ee6763ccc93cf0ddd4ab47380166b5efb8f5e"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/kolkov/angular-editor/blob/a56cc1672e29f058f1b28dba3f532b4040b56439/projects/angular-editor/src/lib/editor/angular-editor.component.ts#L354-L361"},{"source":"CNA: VulnCheck","tags":["release-notes"],"url":"https://github.com/kolkov/angular-editor/releases/tag/v3.0.4"},{"source":"CNA: VulnCheck","tags":["product"],"url":"https://github.com/kolkov/angular-editor"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/kolkov-angular-editor-before-3.0.4-xss-via-toggleeditormode"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/kolkov/angular-editor/pull/587"},{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/kolkov/angular-editor/commit/1b6ee6763ccc93cf0ddd4ab47380166b5efb8f5e"}],"revision":"b301ffe38a20a5d6185605c94693bf67472c4bc6cf129ba9a3035abc0c49a9b6","sources":[{"modifiedAt":1794659577503,"name":"CNA: VulnCheck","retrievedAt":1794661698467,"url":"https://www.cve.org/CVERecord?id=CVE-2025-71464"}],"ssvc":null,"status":"published","title":"@kolkov/angular-editor before 3.0.4 XSS via toggleEditorMode()","updatedAt":1794661698467}