| TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serializationCVE-2026-116675 · GHSA-MF2P-H6HF-FCWM |
tinymce/tinymcetinymce |
ComposernpmNuGet |
High
|
Fix reported |
|
| TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributesCVE-2026-47759 · GHSA-Q742-QVGC-GC2F |
tinymce/tinymcetinymce |
ComposernpmNuGet |
High
|
Fix reported |
|
| TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGsCVE-2026-47760 · GHSA-MH5M-5HW4-5C69 |
tinymce/tinymcetinymce |
ComposernpmNuGet |
High
|
Fix reported |
|
| TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injectionCVE-2026-47761 · GHSA-VG35-5WQ7-3X7W |
tinymce/tinymcetinymce |
ComposernpmNuGet |
High
|
Fix reported |
|
| TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elementsCVE-2024-38357 · GHSA-W9JX-4G6G-RP7XVersion ranges need review. |
tinymce/tinymcetinymce |
ComposernpmNuGetPyPI |
Medium
|
Fix reported |
|
| TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp optionCVE-2024-38356 · GHSA-9HCV-J9PV-QMPHVersion ranges need review. |
tinymce/tinymcetinymce |
ComposernpmNuGetPyPI |
Medium
|
Fix reported |
|
| TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframesCVE-2024-29203 · GHSA-438C-3975-5X3F |
tinymce/tinymcetinymce |
ComposernpmNuGet |
Medium
|
Fix reported |
|
| TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elementsCVE-2024-29881 · GHSA-5359-PVF2-PW78 |
tinymce/tinymcetinymce |
ComposernpmNuGet |
Medium
|
Fix reported |
|
| TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodesCVE-2023-48219 · GHSA-V626-R774-J7F8 |
tinymce/tinymcetinymce |
ComposernpmNuGet |
Medium
|
Fix reported |
|
| TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave pluginCVE-2023-45818 · GHSA-V65R-P3VV-JJFV |
tinymce/tinymcetinymce |
ComposernpmNuGet |
Medium
|
Fix reported |
|
| TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` commentsCVE-2026-47762 · GHSA-V98H-VMPC-FPQV |
tinymce/tinymcetinymce |
ComposernpmNuGet |
High
|
Fix reported |
|
| Cross-site scripting vulnerability in TinyMCE pluginsCVE-2024-21910 · GHSA-R8HM-W5F7-WJ39Version ranges need review. |
tinymce/tinymcetinymce |
ComposernpmNuGetPyPI |
Medium
|
Fix reported |
|
| Cross-site scripting vulnerability in TinyMCECVE-2024-21911 · GHSA-W7JX-J77M-WP65 |
tinymce/tinymcetinymce |
ComposernpmNuGet |
Medium
|
Fix reported |
|
| Cross-site scripting vulnerability in TinyMCECVE-2024-21908 · GHSA-5H9G-X5RV-25WG |
tinymce/tinymcetinymce |
ComposernpmNuGet |
Medium
|
Fix reported |
|
| TinyMCE XSS vulnerability in notificationManager.open APICVE-2023-45819 · GHSA-HGQX-R2HP-JR38 |
tinymce/tinymcetinymce |
ComposernpmNuGet |
Medium
|
Fix reported |
|
| Cross-site scripting vulnerability in TinyMCE alertsCVE-2022-23494 · GHSA-GG8R-XJWQ-4W92 |
tinymce/tinymcetinymce |
ComposernpmNuGet |
Medium
|
Fix reported |
|
