CVE-2026-124494 | JiHong88 SunEditor up to 3.3.x Sanitizer _normalizeURL cross site scripting

November 8, 2026 Yanac

A vulnerability labeled as problematic has been found in JiHong88 SunEditor up to 3.3.x. This issue affects the function _normalizeURL of the component Sanitizer. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-124494. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More