npm/tinymce CVE-2023-45819: medium 6.1, EPSS 0.63%
TinyMCE XSS vulnerability in notificationManager.open API
Action: Upgrade tinymce to 5.10.8 (5.x) or 6.7.1 (6.x) or later.
npm i tinymce@6.7.1npm i tinymce@5.10.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.7.1 | - |
| 0 | 5.10.8 | - |
Fixed versions
| 6.7.1 | 5.10.8 |
Sources
- osv: GHSA-hgqx-r2hp-jr38
- https://github.com/tinymce/tinymce/security/advisories/GHSA-hgqx-r2hp-jr38
- https://nvd.nist.gov/vuln/detail/CVE-2023-45819
- https://github.com/tinymce/tinymce
- https://tiny.cloud/docs/release-notes/release-notes5108/#securityfixes
- https://tiny.cloud/docs/tinymce/6/6.7.1-release-notes/#security-fixes
CVE-2023-45819 · published · modified · JSON