Sceditor Sceditor vulnerabilities

• samclarke sceditor SCEditor affected by DOM XSS via emoticon URL/HTML injection CVE-2026-25581 Fix available 5.4 MediumFebruary 6, 2026
• sceditor SCEditor 2.1.3 allows XSS. CVE-2019-19466 6.1 MediumDecember 5, 2019