CVE-2020-12648 · Vexday

CVE-2020-12648

EPSS 1.8%

A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://labs.bishopfox.com/advisories/tinymce-version-5.2.1