Vendor

Plate

1 brief RSS

Cross-Site Scripting Vulnerability in Plate Media Embed Renderer

A vulnerability in the Plate @platejs/media package allows attackers to bypass URL sanitization and achieve Cross-Site Scripting (XSS) by embedding malicious JavaScript URIs in media documents (CVE-2026-55596).

@platejs/media xss injection web-application cve-2026-55596

1t 1c 2h ago