Description
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | froala/wysiwyg-editor | < 3.2.7 | 3.2.7 | GHSA-rr6v-h7m8-wc9f |
Medium · 5.4
CVE-2021-28114
EUVD-2021-1491GHSA-rr6v-h7m8-wc9f
Cross-site Scripting in Froala WYSIWYG Editor
Published Jul 16, 2021 · Updated Aug 3, 2024 · Assigned by mitre