Security Advisory

CVE-2024-21910

6.1
MEDIUM

Vulnerability Description

TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser.
Published Date January 3, 2024
Official Source NIST NVD Advisory