Product
The SunEditor Embed plugin contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2026-54606) where unsanitized script elements appended to the DOM allow for arbitrary JavaScript execution.