---
id: 4066
title: "[CVE-2021-28114] Froala Editor, Version 3.2.6 Advisory"
cve: CVE-2021-28114
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/froala-editor-v3-2-6-advisory"
published_at: "2021-06-02T00:00:00Z"
tags: ["web-security", "xss", "vulnerability", "advisory", "froala", "cve-2021-28114"]
phying_url: "https://phying.com/item/4066"
lang: en
---

# [CVE-2021-28114] Froala Editor, Version 3.2.6 Advisory

## Summary

Advisory on CVE-2021-28114: Froala Editor 3.2.6 and earlier can have HTML sanitization bypassed to run JavaScript in the host app; update to 3.2.7 with the Full Feature config.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2021-28114
- **Published:** 2021-06-02T00:00:00Z
- **Original:** https://bishopfox.com/blog/froala-editor-v3-2-6-advisory
- **Phying News:** https://phying.com/item/4066