tinymce/tinymce vulnerabilities
CVEs whose affected-version data names the tinymce/tinymce package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2024-38357Medium· 6.1TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
▾ Sunlittinymce · tinymceEPSS 0.53%via OSV
CVE-2024-38356Medium· 6.1TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
▾ Sunlittinymce · tinymceEPSS 0.53%via OSV
CVE-2024-21910Medium· 6.1Cross-site scripting vulnerability in TinyMCE plugins
Cross-site scripting vulnerability in TinyMCE plugins
▾ Sunlittinymce · tinymceEPSS 0.96%via OSV