CVE-2021-28114: Froala Editor

Medium severity, CVSS 5.4. EPSS: 52% chance of exploitation in the next 30 days.

Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.

Affected products

• Froala Froala Editor: before 3.2.7 (fixed in 3.2.7)

Published 2021-07-16. Last modified 2026-06-17.