CVE-2020-12648
14.08.2020, 14:15
A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.
| Vendor | Product | Version |
|---|---|---|
| tiny | tinymce | 𝑥 < 4.9.11 |
| tiny | tinymce | 5.0.0 ≤ 𝑥 < 5.4.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases