CVE-2023-30792 (published 2023-04-29T02:21:49.696Z)
Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources.
Affected products: Vendor: Meta Platforms, Inc
Product: Lexical
Versions: 0.0.0