{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.2.6"}],"component":"froala-editor","cve_ids":["CVE-2021-30109"],"ecosystem":"npm","epss":0.01224,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cq6w-w5rj-p9x8","id":"tcs_01M5KFK9DBYF8756ARZQGH1X2D","modified_at":"2023-11-08T04:05:44.619571Z","published_at":"2021-10-06T17:47:05Z","references":["https://osv.dev/vulnerability/GHSA-cq6w-w5rj-p9x8","https://nvd.nist.gov/vuln/detail/CVE-2021-30109","https://github.com/Hackdwerg/CVE-2021-30109/blob/main/README.md","https://github.com/froala/wysiwyg-editor-release","http://froala.com"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cq6w-w5rj-p9x8","url":"https://osv.dev/vulnerability/GHSA-cq6w-w5rj-p9x8"}],"summary":"Cross-site Scripting in Froala Editor"}