Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Vaadin
Rich-text-editor
Vaadin Rich-text-editor vulnerabilities
vaadin
,
vaadin
rich-text-editor
,
vaadin-core
+1 more
+3 more
Stored Cross-Site Scripting in the Vaadin Rich Text Editor via an Unescaped Video Embed
CVE-2026-120350
5.1
Medium
January 13, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open