CVE-2025-15056

Vulnerability Description

A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS).

This issue affects Quill: 2.0.3.

Published Date

January 13, 2026

Last Modified

January 14, 2026

CWE ID

CWE-74

Source

NVD