Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-21908
6.1
MEDIUMCVSS v3
Severity scale
010
Description
TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.
NPM
tinymce/tinymce
GitHubThe world's #1 JavaScript library for rich text editing. Available for React, Vue and Angular
GitHubThe world's #1 JavaScript library for rich text editing. Available for React, Vue and Angular< 5.9.0NVD