{"action":"Upgrade tinymce to 5.7.1 or later.","affected":[{"fixed":"5.7.1","introduced":"0"}],"component":"tinymce","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["5.7.1"],"ghsa_id":"GHSA-5vm8-hhgr-jcjp","id":"tcs_01M5KF4SRTDJM8HPRKC20MDXY3","modified_at":"2021-05-27T21:29:43Z","published_at":"2021-05-28T19:18:53Z","references":["https://osv.dev/vulnerability/GHSA-5vm8-hhgr-jcjp","https://github.com/tinymce/tinymce/security/advisories/GHSA-5vm8-hhgr-jcjp"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-5vm8-hhgr-jcjp","url":"https://osv.dev/vulnerability/GHSA-5vm8-hhgr-jcjp"}],"summary":"Cross-site scripting vulnerability in TinyMCE"}