Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2021-28114] Froala Editor, Version 3.2.6 Advisory

bishopfox.com | vulnerability | CVE-2021-28114 | #web-security | #xss | #vulnerability | #advisory | #froala | #cve-2021-28114

Summary

Advisory on CVE-2021-28114: Froala Editor 3.2.6 and earlier can have HTML sanitization bypassed to run JavaScript in the host app; update to 3.2.7 with the Full Feature config.
Published
Collected

original ↗

Related coverage

back