Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-q742-qvgc-gc2f
  • NuGet/TinyMCE
  • Packagist/tinymce/tinymce
  • npm/tinymce
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes 05 Jun
  • Fix available
  • Severity - 8.7 (High)
CLEANSTART-2026-UG66310
  • CleanStart/thingsboard-tb-web-ui
Security fix for ghsa-q742-qvgc-gc2f applied in: thingsboard-tb-web-ui 4.3.1.1-r1 yesterday
  • Fix available
CVE-2026-47759
  • github.com/tinymce/tinymce
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes 28 May
  • Fix available
  • Severity - 8.7 (High)