Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-21911
HistoryJan 03, 2024 - 4:15 p.m.

Cross site scripting

2024-01-0316:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site scripting
tinymce
vulnerability
html
javascript
nvd

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

TinyMCE versions before 5.6.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user’s browser.

CPENameOperatorVersion
tinymcelt5.6.0

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%