TinyMCE versions prior to 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
tiny tinymce |