Tiny vulnerabilities

Products

• Tinymce 16
• Tinybrowser 2

Newest

• tiny tinymce TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments CVE-2026-47762 Fix available 8.7 HighMay 28, 2026
• tiny tinymce TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection CVE-2026-47761 Public exploitFix available 8.7 HighMay 28, 2026
• tiny tinymce TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes CVE-2026-47759 Fix available 8.7 HighMay 28, 2026
• tiny tinymce TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs CVE-2026-47760 Fix available 8.7 HighMay 28, 2026
• tiny moxiemanager php In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command.... CVE-2025-30091 9.4 CriticalMarch 25, 2025
• native grid llc a no-code page builder for beautiful performance-based content, tiny setka workflow +1 more WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2024-24701 4.3 MediumFebruary 28, 2024
• tiny plupload Arbitrary File Upload CVE-2021-23562 Fix available 4.2 MediumDecember 3, 2021
• tiny tinymce TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements CVE-2024-29881 Fix available 4.3 MediumMay 28, 2021
• tiny tinymce TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes CVE-2024-29203 Fix available 4.3 MediumMay 28, 2021
• tiny tinymce Cross-site scripting vulnerability in TinyMCE plugins CVE-2024-21910 Fix available 6.1 MediumMay 28, 2021
• tiny tinymce Cross-site scripting vulnerability in TinyMCE CVE-2024-21908 Fix available 6.1 MediumMay 28, 2021
• tiny tinymce Special characters in unescaped text nodes can trigger mXSS in TinyMCE CVE-2023-48219 Fix available 6.1 MediumMay 28, 2021
• tiny tinymce Cross-site Scripting vulnerability in TinyMCE notificationManager.open API CVE-2023-45819 Fix available 6.1 MediumMay 28, 2021
• tiny tinymce Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin CVE-2023-45818 Fix available 6.1 MediumMay 28, 2021
• tiny tinymce Cross-site scripting vulnerability in TinyMCE alerts CVE-2022-23494 Fix available 5.4 MediumMay 28, 2021
• tiny tinymce Cross-site scripting vulnerability in TinyMCE CVE-2024-21911 Fix available 6.1 MediumJanuary 6, 2021
• tiny tinymce Cross-site scripting vulnerability in TinyMCE CVE-2020-12648 Fix available 6.1 MediumAugust 11, 2020
• joomla! tinybrowser plugin, tiny tinybrowser +1 more TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php. CVE-2011-4908 Public exploit EPSS 55.8% 9.8 CriticalFebruary 12, 2020
• joomla! tiny browser included with tinymce 3.0, tiny tinybrowser +1 more Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP... CVE-2011-4906 Public exploit 9.8 CriticalFebruary 12, 2020
• tiny tinymce Cross-site scripting vulnerability in TinyMCE CVE-2020-17480 Fix available 6.1 MediumJanuary 30, 2020
• tiny tinymce XSS in TinyMCE CVE-2019-1010091 Fix available 6.1 MediumJuly 17, 2019
• jenzabar internet campus solution, tiny moxiemanager +1 more Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and... CVE-2019-10012 7.5 HighMarch 25, 2019