Lucene search
Veracode Vulnerability DatabaseVERACODE:22425HistoryJan 31, 2020 - 3:44 p.m.
Cross-site Scripting (XSS)
2020-01-3115:44:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
0.001 Low
EPSS
Percentile
41.3%
tinymce is vulnerable to cross-site scripting (XSS). The attack exists because it does not prevent the attacker from injecting a malicious script into the editor via the clipboard or APIs, allowing to execute the script when a user loads the editor.
References
github.com/advisories/GHSA-27gm-ghr9-4v95
github.com/tinymce/tinymce/commit/3d7e41401bb2dede70189cc60e4517d2aef537b4
github.com/tinymce/tinymce/commit/67e52b815cf575498cab127dbf7f1899216d819f
github.com/tinymce/tinymce/security/advisories/GHSA-27gm-ghr9-4v95
www.tiny.cloud/docs/release-notes/release-notes514/#securityfixes
Related
cvelist
cvelist
CVE-2020-17480
2020-08-10 19:34:35
cve
cve
CVE-2020-17480
2020-08-10 20:15:11
CVE-2020-23066
2023-06-26 19:15:09
prion
prion
Cross site scripting
2020-08-10 20:15:00
nvd
nvd
CVE-2020-17480
2020-08-10 20:15:11
CVE-2020-23066
2023-06-26 19:15:09
osv
osv
Cross-site scripting in TinyMCE
2021-05-06 17:28:14
Cross-site scripting vulnerability in TinyMCE
2020-01-30 21:22:15
CVE-2020-23066
2023-06-26 19:15:09
nodejs
nodejs
Cross-site scripting in TinyMCE
2021-05-06 17:30:02
ubuntucve
ubuntucve
CVE-2020-17480
2020-08-10 00:00:00
debiancve
debiancve
CVE-2020-17480
2020-08-10 20:15:11
CVE-2020-23066
2023-06-26 19:15:09
github
github
Cross-site scripting vulnerability in TinyMCE
2020-01-30 21:22:15
