Vendor

JiHong88

1 brief RSS

SunEditor Sanitization Bypass Leading to Stored XSS

SunEditor versions up to 2.47.10 contain a critical XSS vulnerability (CVE-2026-59167) where insufficient sanitization of namespaced HTML tags allows for arbitrary JavaScript execution via event-handler attributes.

SunEditor xss web-vulnerability stored-xss cve-2026-59167

2t 1c 50m ago