CVE-2021-30109: Froala Editor

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module.

Affected products

• Froala Froala Editor: version 3.2.6 only

Published 2021-04-05. Last modified 2026-07-09.