CVE-2021-28114
1 advisory.
Packagist/froala/wysiwyg-editor CVE-2021-28114: medium 5.4
Cross-site Scripting in Froala WYSIWYG Editor
Action: Upgrade froala/wysiwyg-editor to 3.2.7 or later.
composer require froala/wysiwyg-editor:3.2.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.7 | - |
Fixed versions
| 3.2.7 |
Sources
- osv: GHSA-rr6v-h7m8-wc9f
- https://nvd.nist.gov/vuln/detail/CVE-2021-28114
- https://froala.com/wysiwyg-editor
- https://labs.bishopfox.com/advisories/froala-editor-v3.2.6
CVE-2021-28114 · published · modified · JSON