CVE-2020-12648
1 advisory.
npm/tinymce CVE-2020-12648: medium 6.1, EPSS 1.80%
Cross-site scripting vulnerability in TinyMCE
Action: Upgrade tinymce to 4.9.11 or later.
npm i tinymce@4.9.11npm i tinymce@5.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.9.11 | - |
| 5.0.0 | 5.4.1 | - |
Fixed versions
| 4.9.11 | 5.4.1 |
Sources
- osv: GHSA-vrv8-v4w8-f95h
- https://github.com/tinymce/tinymce/security/advisories/GHSA-vrv8-v4w8-f95h
- https://github.com/tinymce/tinymce/pull/5843
- https://github.com/tinymce/tinymce/commit/2b71c922214d388838d930806207a66c14e80f63
- https://github.com/tinymce/tinymce/commit/696e43658dc9750ec24fdc4650bd2be9653daf5b
- https://github.com/tinymce/tinymce
- https://www.tiny.cloud/docs/release-notes/release-notes54/#securityfixes
CVE-2020-12648 · published · modified · JSON