medium6.1
CVE-2020-12648
A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editi…
Impact
A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiny | Tinymce | before 4.9.11 from 5.0.0 before 5.4.1 |