CVE-2026-124492
SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark List
CVSS Score
7.6
EPSS Score
0.0%
EPSS Percentile
0th
SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which inserts entity-decoded h1-h6 header textContent into the bookmark list via innerHTML without escaping. Attackers can store HTML-encoded payloads in editor headers that execute JavaScript when a victim opens the link modal and types # in the URL input.
| CWE | CWE-79 |
| Vendor | jihong88 |
| Product | suneditor |
| Published | Nov 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for jihong88 suneditor
Be the first to know when new high vulnerabilities affecting jihong88 suneditor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
Low
Availability
None
Affected Versions
JiHong88 / suneditor
0 < 3.4.0
References
Credits
iElloc