DOC-2461_2: Add CVE's for TinyMCE 7.2 release notes. - Githubissues

tinymce / tinymce-docs

TinyMCE Documentation

https://www.tiny.cloud/docs/

Other

87 stars 221 forks source link

DOC-2461_2: Add CVE's for TinyMCE 7.2 release notes. #3364

Closed kemister85 closed 3 weeks ago

kemister85 commented 3 weeks ago

Ticket: DOC-2461

Site: Staging branch

Changes:

add CVE for: HTML entities that were double decoded in noscript elements caused an XSS vulnerability.0
add CVE for: It was possible to inject XSS HTML that was not matching the regexp when using the noneditable_regexp option.

Pre-checks:

[x] Branch prefixed with feature/<version>/, hotfix/<version>/, staging/<version>/, or release/<version>/

Review:

[x] Documentation Team Lead has reviewed