CVE-2025-15056

A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.

Score

CVSS 3.1 6.1 Medium

Status

Modified - help@fluidattacks.com

Published

2026-01-13

Last modified

2026-04-20

Weaknesses

CWE-79

Affected products

• Quill (Slab)

References

• https://fluidattacks.com/advisories/diomedes
• https://github.com/slab/quill