CVE-2021-32854 textAngular text editor vulnerable to Cross-site Scripting

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...

CVE-2021-32854

The CVE-2021-32854 issue affects textAngular (Angular.js) versions 1.5.16 and earlier, due to a copy-paste cross-site scripting (XSS) flaw in the editor. The root cause is an XSS vulnerability triggered when a user pastes malicious payloads into the text editor. No patched versions are identified...