CVE-2026-124494 — Stored XSS in SunEditor before 3.4.0 via entity sanitizer bypass

SunEditor before version 3.4.0 contains a stored cross-site scripting (XSS) vulnerability.