Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-12648
6.1
MEDIUMCVSS v3
Published
August 14, 2020
CVSS v2
4.3 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.
NPM
tinymce/tinymce
GitHubThe world's #1 JavaScript library for rich text editing. Available for React, Vue and Angular
GitHubThe world's #1 JavaScript library for rich text editing. Available for React, Vue and Angular< 4.9.11, >= 5.0.0, < 5.4.1NVD