In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-4061.json"