CVE-2020-23066

2023-06-2600:00:00

ubuntu.com

cross site scripting

tinymce

arbitrary code

editor function

cve-2020-23066

debian bug reporting

0.0004 Low

EPSS

Percentile

5.1%

JSON

Cross Site Scripting vulnerability in TinyMCE v.4.9.6 and before and
v.5.0.0 thru v.5.1.4 allows an attacker to execute arbitrary code via the
editor function.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972642>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchtinymce< anyUNKNOWN
ubuntu20.04noarchtinymce< anyUNKNOWN
ubuntu16.04noarchtinymce< anyUNKNOWN