CVE-2020-17480

TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard or APIs to insert…

published August 10, 2020

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard or APIs to insert content into the editor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01248 · 69.1th percentile
Published
2020-08-10T19:34Z
EPSS history
Timeline
  • 10 AUG 19:34Z
    TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard or APIs to insert…
    cvelistv5