First published: Wed Jan 06 2021(Updated: )
### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5h9g-x5rv-25wg. This link is maintained to preserve external references. ### Original Description TinyMCE versions before 5.6.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.
Credit: disclosure@vulncheck.com disclosure@vulncheck.com
Affected Software | Affected Version | How to fix |
---|---|---|
composer/tinymce/tinymce | <5.6.0 | 5.6.0 |
nuget/TinyMCE | <5.6.0 | 5.6.0 |
npm/tinymce | <5.6.0 | 5.6.0 |
npm/tinymce | <5.6.0 | |
Tiny Tinymce | <5.6.0 | |
<5.6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.