The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations.
| Vendor | Product | Versions |
|---|---|---|
| hcl | verse for android | 14.5.10 |
Updated description with more technical detail and corrected exploit availability status.
Initial creation
