The cross-site scripting flaw could enable arbitrary code execution, information disclosure – and even account takeover.
Source: Threadpost
High-Severity TinyMCE Cross-Site Scripting Flaw Fixed
- Advertisement -
APLICATIONS
Researcher Says NSA’s Ghidra Tool Can Be Used for RCE
Researchers have released a proof-of-concept showing how a XXE vulnerability can be exploited to attack Ghidra project users.
Source: Threadpost
