Packagist/tinymce/tinymce CVE-2024-21908: medium 6.1, EPSS 1.07%
Cross-site scripting vulnerability in TinyMCE
Action: Upgrade tinymce/tinymce to 5.9.0 or later.
composer require tinymce/tinymce:5.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.9.0 | - |
Fixed versions
| 5.9.0 |
Sources
- osv: GHSA-5h9g-x5rv-25wg#Packagist/tinymce/tinymce
- https://github.com/tinymce/tinymce/security/advisories/GHSA-5h9g-x5rv-25wg
- https://github.com/tinymce/tinymce
- https://www.tiny.cloud/docs/release-notes/release-notes59/#securityfixes
CVE-2024-21908 · published · modified · JSON