CVE-2021-30109

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-05 · updated 2026-07-09
Weakness: CWE-79

Description

Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module.

Affected products

Froala Editor: 3.2.6

References

https://github.com/Hackdwerg/CVE-2021-30109/blob/main/README.md
https://github.com/Hackdwerg/CVE-2021-30109/blob/main/README.md

Get alerted when CVE-2021-30109 or the next vulnerability affects your stack