Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-21908
HistoryJan 03, 2024 - 4:15 p.m.

Cross site scripting

2024-01-0316:15:00
PRIOn knowledge base
www.prio-n.com
4
tinymce
5.9.0
xss vulnerability
unauthenticated
remote attacker
arbitrary javascript

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.4%

TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user’s browser.

CPENameOperatorVersion
tinymcelt5.9.0

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.4%

Related for PRION:CVE-2024-21908