CVE-2024-21910

TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser...

CVE-2024-21910

CVE-2024-21910 affects TinyMCE plugins with versions before 5.10.0. The issue is a cross-site scripting vulnerability: a remote, unauthenticated attacker can craft image or link URLs that cause execution of arbitrary JavaScript in an editing user’s browser. The description in connected sources co...

@angular-materials/ngx-admin (>=1.0.0 <=1.0.1), @aurocraft/builder (>=1.0.0 <=3.3.3) +297 more potentially affected by CVE-2024-21910 via tinymce (>=4.5.1 <=5.0.6)

tinymce NPM version =4.5.1, =1.0.0, =1.0.0, =1.0.0-alpha.39-baliz, =4.3.0, =0.5.0, =0.1.0, =0.0.4, =0.1.2, =0.8.4, =0.1.1, =0.0.13, =1.3.0, =1.0.0, =2.0.0-beta.1, =4.1.0-rc.1 and more Source cves: CVE-2024-21910 Source advisory: OSV:GHSA-R8HM-W5F7-WJ39...