1051 matches found
EUVD-2026-55801
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...
CVE-2026-72743
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...
CVE-2026-72743
SQLBot 1.10.0 contains a stored XSS in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. If an attacker can modify the dashboard text widget, they can inject arbitrary HTML/JavaScript that executes for all dashboard viewers. The issue is fixed in commit c...
CVE-2026-72743 SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...
CVE-2026-72743: Improper Neutralization of Input During Web Page Generation
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...
CLSA-2026-1784077492 TuxCare security update for tinymce (3 CVEs)
TuxCare rebuilt tinymce to address 3 CVEs. Fixed in 5.10.9-tuxcare.2...
CLSA-2026-1783904630 TuxCare security update for tinymce (3 CVEs)
TuxCare rebuilt tinymce to address 3 CVEs. Fixed in 4.9.11-tuxcare.2...
CLSA-2026-1781052744 TuxCare security update for tinymce (4 CVEs)
TuxCare rebuilt tinymce to address 4 CVEs. Fixed in 6.8.6-tuxcare.4...
CLSA-2026-1777423184 TuxCare security update for tinymce (13 CVEs)
TuxCare rebuilt tinymce to address 13 CVEs. Fixed in 4.9.11-tuxcare.1...
CLSA-2026-1777423186 TuxCare security update for tinymce (4 CVEs)
TuxCare rebuilt tinymce to address 4 CVEs. Fixed in 5.10.9-tuxcare.1...
CLSA-2026-1775262593 TuxCare security update for tinymce (1 CVE)
TuxCare rebuilt tinymce to address 1 CVE. Fixed in 6.8.6-tuxcare.1...
CVE-2026-65535
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
CVE-2026-65535 WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
CVE-2026-65535
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
CVE-2026-65535 WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
EUVD-2026-48136
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
CVE-2026-65535
CVE-2026-65535 concerns the WordPress TinyMCE Templates plugin, specifically versions
WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin TinyMCE Templates versions = 4.8.1...
