Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-12648] TinyMCE, Version 5.2.1 Advisory

bishopfox.com | vulnerability | CVE-2020-12648 | #xss | #vulnerability | #advisory | #javascript | #tinymce | #cve-2020-12648

Summary

A Bishop Fox advisory on CVE-2020-12648: an XSS flaw in TinyMCE 5.2.1 and earlier lets attackers bypass the editor's sanitization logic; exploitability depends on configuration.
Published
Collected

original ↗

Related coverage

back