---
id: 4124
title: "[CVE-2020-12648] TinyMCE, Version 5.2.1 Advisory"
cve: CVE-2020-12648
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/tinymce-version-5-2-1-advisory"
published_at: "2020-08-12T00:00:00Z"
tags: ["xss", "vulnerability", "advisory", "javascript", "tinymce", "cve-2020-12648"]
phying_url: "https://phying.com/item/4124"
lang: en
---

# [CVE-2020-12648] TinyMCE, Version 5.2.1 Advisory

## Summary

A Bishop Fox advisory on CVE-2020-12648: an XSS flaw in TinyMCE 5.2.1 and earlier lets attackers bypass the editor's sanitization logic; exploitability depends on configuration.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2020-12648
- **Published:** 2020-08-12T00:00:00Z
- **Original:** https://bishopfox.com/blog/tinymce-version-5-2-1-advisory
- **Phying News:** https://phying.com/item/4124