medium5.4
CVE-2021-28114
Cross-site Scripting in Froala WYSIWYG Editor
Impact
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | froala/wysiwyg-editor | < 3.2.7 | 3.2.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Froala | Froala Editor | before 3.2.7 |