Lucene search
Veracode Vulnerability DatabaseVERACODE:20846HistoryJul 18, 2019 - 2:14 a.m.
Cross-Site Scripting (XSS)
2019-07-1802:14:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
44.8%
tinymce is vulnerable to Cross-Site Scripting. The library does not properly sanitise the input to the media element, allowing users to paste malicious content to media element’s embed tab to execute arbitrary Javascript code.
References
Related
osv
osv
CVE-2019-1010091
2019-07-17 17:15:13
XSS in TinyMCE
2020-05-11 20:00:15
cvelist
cvelist
CVE-2019-1010091
2019-07-17 16:35:10
githubexploit
githubexploit
Exploit for Cross-site Scripting in Tiny Tinymce
2020-12-01 09:18:57
nvd
nvd
CVE-2019-1010091
2019-07-17 17:15:13
prion
prion
Input validation
2019-07-17 17:15:00
cve
cve
CVE-2019-1010091
2019-07-17 17:15:13
ubuntucve
ubuntucve
CVE-2019-1010091
2019-07-17 00:00:00
debiancve
debiancve
CVE-2019-1010091
2019-07-17 17:15:13
github
github
XSS in TinyMCE
2020-05-11 20:00:15
