PT-2014-2276

Name of the Vulnerable Software and Affected Versions TinyMCE version 3.5.8 Description The issue concerns the bbcode plugin in TinyMCE, which fails to properly enforce the security policy. This specifically affects the encoding directive and the valid elements attribute, allowing for cross-site...