~ / search / GHSA-rr6v-h7m8-wc9f

GHSA-rr6v-h7m8-wc9f

Cross-site Scripting in Froala WYSIWYG Editor

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-28114

Packages

EcosystemPackageAffectedFixed in
Packagist froala/wysiwyg-editor < 3.2.7 3.2.7

Details

As written in the advisory (Markdown source, shown as plain text).

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.

References

External links from the advisory. They lead to third-party sites.