← All advisories

Medium severity5.4NVD Advisory· Published Oct 22, 2020· Updated Jun 17, 2026

CVE-2020-27666

CVE-2020-27666

Description

Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
strapi-plugin-content-managernpm	< 3.2.5	3.2.5

Affected products

3

Strapi/Strapi
cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*
Range: <3.2.5
Strapi/Strapidescription
ghsa-coords
pkg:npm/strapi-plugin-content-manager
Range: < 3.2.5

Patches

Vulnerability mechanics

References

4

github.com/strapi/strapi/pull/8440nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-qvp5-mm7v-4f36ghsaADVISORY
github.com/strapi/strapi/releases/tag/v3.2.5nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-27666ghsaADVISORY

News mentions

0

No linked articles in our index yet.