PT-2021-17750

CVE-2021-28114

Published

2021-06-03

Updated

2022-09-23

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG Editor version 3.2.6-1

Description: The issue is related to a namespace confusion during parsing, which leads to a cross-site scripting (XSS) problem.

Recommendations: For Froala WYSIWYG Editor version 3.2.6-1, update to a version that fixes the namespace confusion issue to prevent XSS attacks.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-RR6V-H7M8-WC9F

Found an issue in the description? Have something to add? Feel free to write us 👾