CVE-2026-120350 | Vaadin Rich Text Editor up to 25.0.12/25.1.12/25.2.11/25.3.3 asDelta cross site scripting

A vulnerability categorized as problematic has been discovered in Vaadin Rich Text Editor up to 25.0.12/25.1.12/25.2.11/25.3.3. This affects the function asDelta. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-120350. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More