TinyMCE vulnerabilities (NuGet)
16 vulnerabilities.
-
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization 8.5 High -
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments 8.7 High -
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection 8.7 High -
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes 8.7 High -
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs 8.7 High -
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements 6.1 Medium -
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option 6.1 Medium -
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements 4.3 Medium -
TinyMCENuGet TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes 4.3 Medium -
TinyMCENuGet Cross-site scripting vulnerability in TinyMCE plugins 6.1 Medium -
TinyMCENuGet Cross-site scripting vulnerability in TinyMCE 6.1 Medium -
TinyMCENuGet Special characters in unescaped text nodes can trigger mXSS in TinyMCE 6.1 Medium -
TinyMCENuGet Cross-site Scripting vulnerability in TinyMCE notificationManager.open API 6.1 Medium -
TinyMCENuGet Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin 6.1 Medium -
TinyMCENuGet Cross-site scripting vulnerability in TinyMCE alerts 5.4 Medium -
TinyMCENuGet Cross-site scripting vulnerability in TinyMCE 6.1 Medium