Description
Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or HTML via the "edit HTML source" option.
Unscored
CVE-2014-8707
EUVD-2014-8539GHSA-w2j4-gjrr-4w3g
Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or …
Published Mar 17, 2017 · Updated Aug 6, 2024 · Assigned by mitre