Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-21910
HistoryJan 03, 2024 - 4:15 p.m.

Cross site scripting

2024-01-0316:15:00
PRIOn knowledge base
www.prio-n.com
4
cross site scripting
tinymce
version 5.10.0
remote attacker
unauthenticated
crafted urls
arbitrary javascript
browser

6.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user’s browser.

CPENameOperatorVersion
tinymcelt5.10.0

6.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

Related for PRION:CVE-2024-21910