Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: tinymce Component: Tinymce Clear all filters
TI-2012-03612 CVE-2012-4230 · GHSA-qwvc-vq5g-8cxv

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy…

Priority LOW 23

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the (1) encoding directive and (2) valid_elements attribute, which allows attackers to conduct cross-site scripting (XSS) attac…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0139 Published 2014-04-25 No fix listed CWE-264
TI-2011-04153 CVE-2011-4825 · GHSA-4x3h-v693-hw3m

Static code injection vulnerability in inc/function.base.php in Ajax File and Image…

Priority MEDIUM 60

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allow…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.39162 Published 2011-12-15 No fix listed CWE-94