Description

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.

Related CPE's

a

froala

froala_editor

Vulnerable

References

https://froala.com/wysiwyg-editor/

Vendor Advisory

https://labs.bishopfox.com/advisories

Third Party Advisory

https://labs.bishopfox.com/advisories/froala-editor-v3.2.6

Release NotesThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.4 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-07-16T13:15:08.943

3 years ago

Last modified

2022-09-23T16:51:39.850

2 years ago