High-Severity TinyMCE Cross-Site Scripting Flaw Fixed