Skip to content
OpenAdvisories

Package · PyPI

django-tinymce

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.1
    CVE-2024-38357

    TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

    TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded int…

    tinymce tinymce roundcube tinymce Ubuntu npm Packagist PyPI NuGet
  • Medium 6.1
    CVE-2024-38356

    TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

    TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content extraction code. When using the `noneditable_regexp` option, specially crafted HTML attributes containing malicious code were able to be…

    tinymce tinymce roundcube tinymce Ubuntu npm Packagist PyPI NuGet
  • Medium 6.1
    CVE-2024-21910

    Cross-site scripting vulnerability in TinyMCE plugins

    TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser.

    tinymce tinymce tinymce/tinymce TinyMCE Ubuntu npm Packagist PyPI NuGet