CVE-2021-32854: Textangular

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches.

Affected products

• Textangular Textangular: up to and including 1.5.16

Published 2023-02-21. Last modified 2026-06-17.