Vulnerabilities > Slab

DATE CVE VULNERABILITY TITLE RISK
2021-04-12 CVE-2021-3163 Cross-site Scripting vulnerability in Slab Quill 4.8.0
A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field.
network
low complexity
slab CWE-79
6.1