textAngular text editor vulnerable to Cross-site Scripting
CVE-2021-32854

6.1MEDIUM

Key Information:

Vendor

Npm

Status
Textangular
Vendor
CVE Published:
21 February 2023

What is CVE-2021-32854?

textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches.

Affected Version(s)

textangular 1.5.16

References

https://securitylab.github.com/advisories/GHSL-2021-1001-...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.