npm
tinymce
15 known vulnerabilities · 0 critical · 0 high
CVE-2024-29203MEDIUM
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Published Mar 26, 2024
CVE-2024-29881MEDIUM
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Published Mar 26, 2024
CVE-2024-38357MEDIUM
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Published Jun 19, 2024
CVE-2023-45818MEDIUM
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Published Oct 19, 2023
CVE-2024-38356MEDIUM
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Published Jun 19, 2024
CVE-2023-48219MEDIUM
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Published Nov 15, 2023
MAL-2023-921
Malicious code in uploadcare-tinymce (npm)
Published Apr 12, 2023
Check your entire dependency tree at onceRun dependency scan →