CVE-2020-6802: Fedoraproject Fedora

Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days.

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

Affected products

• Fedoraproject Fedora: version 30 only; version 31 only; version 32 only
• Mozilla Bleach: before 3.1.1 (fixed in 3.1.1)

Published 2020-03-24. Last modified 2026-06-17.