CVE-2025-15056

CVE-2025-15056 · Quill 2.0.3 - Lack of data validation in HTML export allowing XSS

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.

CVSS 5.1 · Medium · EPSS 0.3%

Published

2026-01-13T20:39:29.627Z

Updated

2026-04-20T14:10:18.123Z

Stack: node

Check your server →