Lucene search

K

CVE-2024-38357 TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

🗓️ 19 Jun 2024 20:49:03Reported by GitHub_MType 
cvelist
 cvelist
🔗 www.cve.org👁 17 Views

CVE-2024-38357 TinyMCE XSS vulnerability patched in versions 7.2.0, 6.8.4, 5.11.0 LT

Show more

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Related
Affected
Refs
ReporterTitlePublishedViews
Family
CVE
CVE-2024-38357
19 Jun 202420:15
cve
Github Security Blog
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
19 Jun 202415:07
github
NVD
CVE-2024-38357
19 Jun 202420:15
nvd
OSV
CVE-2024-38357
19 Jun 202420:15
osv
OSV
GHSA-W9JX-4G6G-RP7X TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
19 Jun 202415:07
osv
OSV
UBUNTU-CVE-2024-38357
19 Jun 202420:15
osv
Debian CVE
CVE-2024-38357
19 Jun 202420:15
debiancve
Vulnrichment
CVE-2024-38357 TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
19 Jun 202420:03
vulnrichment
UbuntuCve
CVE-2024-38357
19 Jun 202400:00
ubuntucve
Veracode
Cross-Site Scripting (XSS)
20 Jun 202407:44
veracode
Rows per page
[
  {
    "vendor": "tinymce",
    "product": "tinymce",
    "versions": [
      {
        "version": "< 5.11.0",
        "status": "affected"
      },
      {
        "version": ">= 6.0.0, <6.8.4",
        "status": "affected"
      },
      {
        "version": ">= 7.0.0, < 7.2.0",
        "status": "affected"
      }
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
19 Jun 2024 20:03Current
CVSS36.1
EPSS0.00201
17
.json
Report