Description
A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.
Remediation
References
https://labs.bishopfox.com/advisories/tinymce-version-5.2.1
Related Vulnerabilities
CVE-2020-13445 Vulnerability in maven package com.liferay:com.liferay.portal.template.freemarker
CVE-2020-28847 Vulnerability in npm package valine
CVE-2013-2165 Vulnerability in maven package org.richfaces:richfaces
CVE-2020-8203 Vulnerability in maven package org.webjars:lodash
CVE-2021-35515 Vulnerability in maven package org.apache.commons:commons-compress