DOC-2461: Add CVE's to the TinyMCE 6.8.4 release notes. - Githubissues

tinymce / tinymce-docs

TinyMCE Documentation

https://www.tiny.cloud/docs/

Other

86 stars 221 forks source link

DOC-2461: Add CVE's to the TinyMCE 6.8.4 release notes. #3363

Closed kemister85 closed 3 months ago

kemister85 commented 3 months ago

Ticket: DOC-2461

Site: Staging branch

Changes:

add CVE for: HTML entities that were double decoded in noscript elements caused an XSS vulnerability.
add CVE for: It was possible to inject XSS HTML that was not matching the regexp when using the noneditable_regexp option.

Pre-checks:

[x] Branch prefixed with feature/<version>/, hotfix/<version>/, staging/<version>/, or release/<version>/

Review:

[x] Documentation Team Lead has reviewed