tinacms vulnerabilities (npm)
5 vulnerabilities.
-
tinacmsnpm TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment 9.3 Critical -
tinacmsnpm TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover 7.6 High -
tinacmsnpm TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes 4.8 Medium -
tinacmsnpm Path Traversal in Media Upload Handle in Tina 7.4 High -
tinacmsnpm tinacms vulnerable to arbitrary code execution 7.3 High