Lucene search
+L

2 matches found

OSV
OSV
added 2024/06/19 3:7 p.m.2 views

GHSA-W9JX-4G6G-RP7X TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

Impact A cross-site scripting XSS vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded into the editor. Patches This vulnerability has been patched in TinyMCE 7.2.0,...

6.1CVSS5.8AI score0.00529EPSS
SaveExploits0References8
Rows per page
Query Builder