2 matches found
CVE-2023-23995
CVE-2023-23995 affects the WordPress TinyMCE Custom Styles plugin (versions
CVE-2023-2967
The CVE-2023-2967 entry concerns the TinyMCE Custom Styles WordPress plugin (versions prior to 1.1.4). The connected sources confirm that the issue arises from insufficient sanitization/escaping of certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) even ...