Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-5359-pvf2-pw78
  • NuGet/TinyMCE
  • Packagist/tinymce/tinymce
  • npm/tinymce
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements 26 Mar 2024
  • Fix available
  • Severity - 4.3 (Medium)
CLEANSTART-2026-QW90668
  • CleanStart/thingsboard-tb-web-ui
Security fix for ghsa-5359-pvf2-pw78 applied in: thingsboard-tb-web-ui 4.3.0.1-r0 yesterday
  • Fix available
CVE-2024-29881
  • github.com/tinymce/tinymce
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements 26 Mar 2024
  • Fix available
  • Severity - 4.3 (Medium)