CVE-2025-15056

MEDIUM CVSS: 6.1 Published: 2026-01-13 Modified: 2026-06-17

Description

A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.

Affected Platforms

Slab Quill

Weakness Type

CWE-79, CWE-79

References