6.3
/ 10
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Description
The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations.
Basic Information
ID
CVE-2026-21768
Source
HCL
Published
Jun 19, 2026 at 14:50
Affected Product
Vendor
HCLSoftware
Product
Verse for Android
Version
14.5.10
Affected Versions
HCLSoftware Verse for Android 14.5.10