p PatchFirst

CVE-2021-30109

CVE-2021-30109

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module.

CVSS 6.1 · Medium · EPSS 1.2%

Published
Updated

Stack: node

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • froala-editor npm

    Affected ranges
    • SEMVER: ≤ 3.2.6

    No fix published

Original sources

Check your server →