Description
A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.
Remediation
References
https://labs.bishopfox.com/advisories/tinymce-version-5.2.1
Related Vulnerabilities
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-trino
CVE-2021-41165 Vulnerability in maven package org.webjars.bowergithub.ckeditor:ckeditor4
CVE-2016-10531 Vulnerability in npm package marked
CVE-2021-26118 Vulnerability in maven package org.apache.activemq:artemis-openwire-protocol