textAngular cross-site scripting vulnerability

textAngular is a set of Angular.js text editor tools. A cross-site scripting vulnerability exists in the textAngular-sanitize.js file in textAngular 1.3.6 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...