CVE-2021-30109
Summary
| CVE | CVE-2021-30109 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-04-05 13:15:00 UTC |
|---|
| Updated | 2021-04-08 20:05:00 UTC |
|---|
| Description | Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Froala |
Froala Editor |
3.2.6 |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| The Next Generation WYSIWYG HTML Editor | Rich Text Editor | Froala | |
MISC |
froala.com |
|
| CVE-2021-30109/README.md at main · Hackdwerg/CVE-2021-30109 · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 980516 Nodejs (npm) Security Update for froala-editor (GHSA-cq6w-w5rj-p9x8)
