CVE-2024-21910

TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.16), @angular-materials/ngx-admin (>=1.0.0, <=1.0.1) +403 more potentially affected by CVE-2024-21910 via tinymce (>=4.5.1, <=5.9.2)

tinymce NPM version =4.5.1, =0.1.7, =1.0.0, =1.0.0, =0.1.6, =0.0.1, =1.0.0-alpha.39-baliz, =4.3.0, =9.0.0-alpha.5, =0.5.0, =0.1.0, =0.0.4, =0.1.2, =0.8.4, =0.9.22 - @ethaks/fvtt-quench 0.5.2 and more Source cves: CVE-2024-21910 Source advisory: MEND:CVE-2024-21910...

CVE-2024-21910

CVE-2024-21910 affects TinyMCE plugins with versions before 5.10.0. The issue is a cross-site scripting vulnerability: a remote, unauthenticated attacker can craft image or link URLs that cause execution of arbitrary JavaScript in an editing user’s browser. The description in connected sources co...

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.16), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.3.7) +111 more potentially affected by CVE-2024-21910 via tinymce (>=5.0.6, <=5.9.2)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =10.3.1-snapshot-1616513687673, =0.18.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-beta.1, =0.0.1-alpha.1, =0.0.17 and more Source cves: CVE-2024-21910 Source advisory: OSV:GHSA-R8HM-W5F7-WJ39...