Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cross-site Scripting (XSS)

🗓️ 23 Oct 2023 04:31:48Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

TinyMCE XSS vulnerability with HTML snippet restoration and browser 'DomParser

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: There is a vulnerability in tinymce-6.3.1.min.js used by IBM Maximo Asset Management application (CVE-2023-45819 and CVE-2023-45818)
15 Feb 202414:47
–ibm
CNNVD		TinyMCE Cross-Site Scripting Vulnerability
19 Oct 202300:00
–cnnvd
CVE		CVE-2023-45818
19 Oct 202321:18
–cve
Cvelist		CVE-2023-45818 Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin
19 Oct 202321:18
–cvelist
Debian CVE		CVE-2023-45818
19 Oct 202321:18
–debiancve
EUVD		EUVD-2023-2813
3 Oct 202520:07
–euvd
Github Security Blog		TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
19 Oct 202316:36
–github
NVD		CVE-2023-45818
19 Oct 202322:15
–nvd
OSV		CVE-2023-45818 Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin
19 Oct 202321:18
–osv
OSV		GHSA-V65R-P3VV-JJFV TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
19 Oct 202316:36
–osv
Rows per page
Vulners
Node
tinymcetinymceRange6.0.0–6.7.0js
OR
tinymcetinymceRange4.0.25–5.10.7js
OR
tinymcetinymceRange6.0.0–6.7.0js
OR
tinymcetinymceRange4.0.0–5.10.7js
OR
tinymcetinymceRange6.0.0–6.7.0js
OR
tinymcetinymceRange3.4.3.2–5.10.7js
OR
tinymcetinymce/tinymceRange6.0.0–6.7.0js
OR
tinymcetinymce/tinymceRange4.0.0–5.10.7js
OR
tinymcetinymceRange6.0.0–6.7.0js
OR
tinymcetinymceRange4.7.6–5.10.7js
OR
tinymcetinymceRange6.0.0–6.7.0js
OR
tinymcetinymceRange4.0.28–5.10.7js
OR
tinymce.jquerytinymce.jqueryRange3.4.4–5.10.7js
SourceLink
tinywww.tiny.cloud/docs/tinymce/6/6.7.1-release-notes/
tinywww.tiny.cloud/docs/release-notes/release-notes5108/
githubwww.github.com/tinymce/tinymce/commit/0aa56610cf3d0bf247b06da0b7124568b695b551
githubwww.github.com/tinymce/tinymce-dist/commit/b9c50833d455adcf5ae89a6da7648ae5d65468df
githubwww.github.com/tinymce/tinymce/commit/1365f04567c6a57dbe6348674b1776c3e110346a
githubwww.github.com/tinymce/tinymce-dist/commit/b1ddb5ec9b0c7f5d542429a044bd303648d2d647
githubwww.github.com/tinymce/tinymce/security/advisories/GHSA-v65r-p3vv-jjfv
researchgatewww.researchgate.net/publication/266654651_mXSS_attacks_Attacking_well-secured_web-applications_by_using_innerHTML_mutations
tinywww.tiny.cloud/docs/release-notes/release-notes5108/
tinywww.tiny.cloud/docs/tinymce/6/6.7.1-release-notes/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
26 Oct 2023 18:45Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.16.1
EPSS0.01282
SSVC
tinymcexsshtml snippetbrowserdomparsermutationpayloadundoredogetcontentformat rawresetcontentautosave
19