Skip to content
Threat Feed
Subscribe

Product

SunEditor (<= 2.47.10)

1 brief RSS
critical advisory

SunEditor Sanitization Bypass Leading to Stored XSS

SunEditor versions up to 2.47.10 contain a critical XSS vulnerability (CVE-2026-59167) where insufficient sanitization of namespaced HTML tags allows for arbitrary JavaScript execution via event-handler attributes.

SunEditor xss web-vulnerability stored-xss cve-2026-59167
2t 1c