First published: Tue Nov 02 2021(Updated: )
### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5h9g-x5rv-25wg. This link is maintained to preserve external references. ### Original Description TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser.
Credit: disclosure@vulncheck.com disclosure@vulncheck.com
Affected Software | Affected Version | How to fix |
---|---|---|
pip/django-tinymce | <3.4.0 | 3.4.0 |
nuget/TinyMCE | <5.10.0 | 5.10.0 |
composer/tinymce/tinymce | <5.10.0 | 5.10.0 |
npm/tinymce | <5.10.0 | 5.10.0 |
npm/tinymce | <5.10.0 | |
Tiny Tinymce | <5.10.0 | |
<5.10.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.