Read the docs

tinymce

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

tinymce records in CISA KEV

No tinymce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Color Picker 2 records LOW Tinymce 2 records MEDIUM Image Manager 1 record LOW Media 1 record LOW Spellchecker Php 1 record LOW

Records

2 records in Tinymce · all components

TI-2011-04153 CVE-2011-4825 · GHSA-4x3h-v693-hw3m

Static code injection vulnerability in inc/function.base.php in Ajax File and Image…

Priority MEDIUM 60

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allow…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.39162 Published 2011-12-15 No fix listed CWE-94
TI-2012-03612 CVE-2012-4230 · GHSA-qwvc-vq5g-8cxv

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy…

Priority LOW 23

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the (1) encoding directive and (2) valid_elements attribute, which allows attackers to conduct cross-site scripting (XSS) attac…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0139 Published 2014-04-25 No fix listed CWE-264
Open these records in search →