Packagist/tinymce/tinymce CVE-2024-21911: medium, EPSS 1.17%
Cross-site scripting vulnerability in TinyMCE
Action: Upgrade tinymce/tinymce to 5.6.0 or later.
composer require tinymce/tinymce:5.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.6.0 | - |
Fixed versions
| 5.6.0 |
Sources
- osv: GHSA-w7jx-j77m-wp65#Packagist/tinymce/tinymce
- https://github.com/tinymce/tinymce/security/advisories/GHSA-w7jx-j77m-wp65
- https://www.npmjs.com/package/tinymce
- https://www.tiny.cloud/docs/release-notes/release-notes56/#securityfixes
CVE-2024-21911 · published · modified · JSON