CVE-2021-41086

Name of the Vulnerable Software and Affected Versions jsuites versions prior to 4.9.11

Description The issue allows for cross-site scripting (XSS) attacks via clipboard content. If a user can be tricked into copying malicious content and pasting it into the HTML editor, a part of the clipboard content is directly written to innerHTML, causing XSS. This enables JavaScript injection.

Recommendations For versions prior to 4.9.11, update to version 4.9.11 to resolve the issue. As a temporary workaround, consider restricting the use of the HTML editor until the update is applied. Avoid pasting arbitrary content from untrusted sources into the HTML editor to minimize the risk of exploitation.