Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-vg35-5wq7-3x7w
  • NuGet/TinyMCE
  • Packagist/tinymce/tinymce
  • npm/tinymce
 TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection 05 Jun
  • Fix available
  • Severity - 8.7 (High)
CLEANSTART-2026-RN17986
  • CleanStart/thingsboard-tb-web-ui
 Security fix for ghsa-vg35-5wq7-3x7w applied in: thingsboard-tb-web-ui 4.3.1.1-r1 18 Sep
  • Fix available
CVE-2026-47761
  • github.com/tinymce/tinymce
 TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection 28 May
  • Fix available
  • Severity - 8.7 (High)