MEDIUM4.3npmNuGetPackagist
GHSA-438c-3975-5x3f· CVE-2024-29203TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Modified: 9/10/2026
package
npm/tinymce
pkg:npm/tinymce
MEDIUM4.3PackagistnpmNuGet
GHSA-5359-pvf2-pw78· CVE-2024-29881TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Modified: 9/10/2026
MEDIUM6.1npmNuGetPackagist
GHSA-5h9g-x5rv-25wg· CVE-2024-21908Cross-site scripting vulnerability in TinyMCE
Modified: 7/8/2026
MEDIUM6.1npmNuGetPackagistPyPI
GHSA-9hcv-j9pv-qmph· CVE-2024-38356, PYSEC-2026-1301TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Modified: 9/10/2026
MEDIUM5.4npmPackagistNuGet
GHSA-gg8r-xjwq-4w92· CVE-2022-23494Cross-site scripting vulnerability in TinyMCE alerts
Modified: 11/8/2023
MEDIUM6.1npmNuGetPackagist
GHSA-hgqx-r2hp-jr38· CVE-2023-45819TinyMCE XSS vulnerability in notificationManager.open API
Modified: 2/16/2024
MEDIUM6.1npmPackagistNuGetPyPI
GHSA-r8hm-w5f7-wj39· CVE-2024-21910, PYSEC-2026-632Cross-site scripting vulnerability in TinyMCE plugins
Modified: 7/8/2026
HIGH8.7npmNuGetPackagist
GHSA-mh5m-5hw4-5c69· CVE-2026-47760TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
Modified: 9/10/2026
HIGH8.7npmNuGetPackagist
GHSA-q742-qvgc-gc2f· CVE-2026-47759TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
Modified: 9/10/2026
MEDIUM6.1npmNuGetPackagistPyPI
GHSA-w9jx-4g6g-rp7x· CVE-2024-38357, PYSEC-2026-1302TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Modified: 9/10/2026
MEDIUM6.1npmPackagistNuGet
GHSA-v626-r774-j7f8· CVE-2023-48219TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Modified: 9/10/2026
MEDIUM6.1npmNuGetPackagist
GHSA-v65r-p3vv-jjfv· CVE-2023-45818TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Modified: 9/10/2026
HIGH8.7npmNuGetPackagist
GHSA-v98h-vmpc-fpqv· CVE-2026-47762TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments
Modified: 7/15/2026
HIGH8.7npmNuGetPackagist
GHSA-vg35-5wq7-3x7w· CVE-2026-47761TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection
Modified: 9/10/2026
MEDIUMnpmNuGetPackagist
GHSA-w7jx-j77m-wp65· CVE-2024-21911Cross-site scripting vulnerability in TinyMCE
Modified: 7/8/2026
HIGHnpm
GHSA-27gm-ghr9-4v95· CVE-2020-17480Cross-site scripting vulnerability in TinyMCE
Modified: 7/8/2026
MEDIUMnpm
GHSA-5vm8-hhgr-jcjpCross-site scripting vulnerability in TinyMCE
Modified: 5/27/2021
MEDIUMnpm
GHSA-c78w-2gw7-gjv3· CVE-2019-1010091XSS in TinyMCE
Modified: 11/8/2023
LOWnpm
GHSA-h96f-fc7c-9r55Regex denial of service vulnerability in codesample plugin
Modified: 1/6/2021
MEDIUM6.1npm
GHSA-vrv8-v4w8-f95h· CVE-2020-12648Cross-site scripting vulnerability in TinyMCE
Modified: 11/8/2023