Packagist/tinymce/tinymce CVE-2024-21910: medium 6.1, EPSS 0.96%
Cross-site scripting vulnerability in TinyMCE plugins
Action: Upgrade tinymce/tinymce to 5.10.0 or later.
composer require tinymce/tinymce:5.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.10.0 | - |
Fixed versions
| 5.10.0 |
Sources
- osv: GHSA-r8hm-w5f7-wj39#Packagist/tinymce/tinymce
- https://github.com/tinymce/tinymce/security/advisories/GHSA-r8hm-w5f7-wj39
- https://github.com/jazzband/django-tinymce/issues/366
- https://github.com/jazzband/django-tinymce/releases/tag/3.4.0
- https://github.com/tinymce/tinymce
- https://pypi.org/project/django-tinymce/3.4.0
CVE-2024-21910 · published · modified · JSON