CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

@averystupidtest/reditor (=3.0.10), @beisen-oneops/amis-ui (>=1.0.0 <=1.0.6) +123 more potentially affected by CVE-2021-30109 via froala-editor (>=2.3.5 <=3.2.6)

froala-editor NPM version =2.3.5, =1.0.0, =1.0.0, =1.0.0, =6.10.0, =0.1.0, =6.12.0-beat1, =0.0.1, =0.1.0, =0.0.6, =0.0.5, =0.0.5, =0.2.3 and more Source cves: CVE-2021-30109 Source advisory: OSV:GHSA-CQ6W-W5RJ-P9X8...

CVE-2021-30109

Affected product: Froala Editor 3.2.6. Vulnerability: Cross-site scripting (XSS) in the hyperlink creation module. Root cause: base64 crafted strings can trigger persistent XSS under certain conditions. Impact: persistent XSS described; no specifics on affected platforms beyond Froala Editor 3.2....