Description
TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using nested elements can bypass attribute sanitization and execute arbitrary JavaScript. This vulnerability is fixed in 7.1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| tinymce | tinymce | >= 6.0.0, < 7.1.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | tinymce | No fix yet | — |
| Ubuntu 18.04 LTS | tinymce | No fix yet | — |
| Ubuntu 16.04 LTS | tinymce | No fix yet | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | tinymce | >= 6.8.0, < 7.1.0 | 7.1.0 | GHSA-mh5m-5hw4-5c69 |
| NuGet | TinyMCE | >= 6.8.0, < 7.1.0 | 7.1.0 | GHSA-mh5m-5hw4-5c69 |
| Packagist | tinymce/tinymce | >= 6.8.0, < 7.1.0 | 7.1.0 | GHSA-mh5m-5hw4-5c69 |