Online Demo

[soaj1664]

Hi

Is there any online demo of your WYSIWYG editor?

Thanks!

[bhaku]

http://cheeaun.github.io/mooeditable/

[soaj1664]

Hi @bhaku

First of all thanks for quick reply.

The editor is vulnerable to an XSS. The editor allows users to insert link and if instead of normal link, I input JavaScript URI

javascript:alert%28location%29

then it works. The attacker can execute arbitrary code of his choice. Please fix this issue. Thanks

[soaj1664]

@bhaku Is the issue has been fixed? Thanks!

[bhaku]

Sorry I'm not a developer this plugin