zinnia-wysiwyg-tinymce (1.4.0) potentially affected by CVE-2024-21910 via django-tinymce (2.2.0)

django-tinymce PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - zinnia-wysiwyg-tinymce 1.4.0 Source cves: CVE-2024-21910 Source advisory: OSV:PYSEC-2026-632...

repomaker (1.0.0b3) potentially affected by CVE-2024-21910 via django-tinymce (2.9.0)

django-tinymce PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - repomaker 1.0.0b3 Source cves: CVE-2024-21910 Source advisory: OSV:PYSEC-2026-632...

tinyblog (>=0.4.0, <=0.5.2) potentially affected by CVE-2024-21910 via django-tinymce (1.5.3)

django-tinymce PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - tinyblog =0.4.0, =0.5.2 Source cves: CVE-2024-21910 Source advisory: OSV:PYSEC-2026-632...

django-saas-email (>=0.1.21, <=0.1.29) potentially affected by CVE-2024-21910 via django-tinymce (2.7.0)

django-tinymce PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - django-saas-email =0.1.21, =0.1.29 Source cves: CVE-2024-21910 Source advisory: OSV:PYSEC-2026-632...

CVE-2024-21910

TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.16), @angular-materials/ngx-admin (>=1.0.0, <=1.0.1) +403 more potentially affected by CVE-2024-21910 via tinymce (>=4.5.1, <=5.9.2)

tinymce NPM version =4.5.1, =0.1.7, =1.0.0, =1.0.0, =0.1.6, =0.0.1, =1.0.0-alpha.39-baliz, =4.3.0, =9.0.0-alpha.5, =0.5.0, =0.1.0, =0.0.4, =0.1.2, =0.8.4, =0.9.22 - @ethaks/fvtt-quench 0.5.2 and more Source cves: CVE-2024-21910 Source advisory: MEND:CVE-2024-21910...

django-saas-email (>=0.1.21, <=0.1.29), geonode (3.3.3) +4 more potentially affected by CVE-2024-21910 via django-tinymce (>=1.5.1b4, <=3.3.0)

django-tinymce PYPI version =1.5.1b4, =0.1.21, =0.1.3.2, =0.3.0, =0.5.2 - zinnia-wysiwyg-tinymce 1.4.0 Source cves: CVE-2024-21910 Source advisory: MEND:CVE-2024-21910...

CVE-2024-21910

CVE-2024-21910 affects TinyMCE plugins with versions before 5.10.0. The issue is a cross-site scripting vulnerability: a remote, unauthenticated attacker can craft image or link URLs that cause execution of arbitrary JavaScript in an editing user’s browser. The description in connected sources co...

hazard-feed (>=0.1.3.2, <=0.1.6.1) potentially affected by CVE-2024-21910 via django-tinymce (2.8.0)

django-tinymce PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - hazard-feed =0.1.3.2, =0.1.6.1 Source cves: CVE-2024-21910 Source advisory: OSV:GHSA-R8HM-W5F7-WJ39...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.16), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.3.7) +111 more potentially affected by CVE-2024-21910 via tinymce (>=5.0.6, <=5.9.2)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =10.3.1-snapshot-1616513687673, =0.18.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-beta.1, =0.0.1-alpha.1, =0.0.17 and more Source cves: CVE-2024-21910 Source advisory: OSV:GHSA-R8HM-W5F7-WJ39...

django-saas-email (>=0.1.21, <=0.1.29) potentially affected by CVE-2024-21910 via django-tinymce (2.7.0)

django-tinymce PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - django-saas-email =0.1.21, =0.1.29 Source cves: CVE-2024-21910 Source advisory: OSV:GHSA-R8HM-W5F7-WJ39...

geonode (3.3.3), hazard-feed (>=0.2.0, <=0.2.5) potentially affected by CVE-2024-21910 via django-tinymce (>=3.2.0, <=3.3.0)

django-tinymce PYPI version =3.2.0, =0.2.0, =0.2.5 Source cves: CVE-2024-21910 Source advisory: OSV:GHSA-R8HM-W5F7-WJ39...