Lucene search

K
osvGoogleOSV:CVE-2020-23066
HistoryJun 26, 2023 - 7:15 p.m.

CVE-2020-23066

2023-06-2619:15:09
Google
osv.dev
2
cross site scripting
tinymce
arbitrary code
editor function
vulnerability

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%

Cross Site Scripting vulnerability in TinyMCE v.4.9.6 and before and v.5.0.0 thru v.5.1.4 allows an attacker to execute arbitrary code via the editor function.

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%