CVE-2024-21908
Assigner: VulnCheck
Published: 2024-01-03T15:38:09.664Z
State: PUBLISHED
affected: collectionURL: https://nuget.org/packages
defaultStatus: unaffected
packageName: TinyMCE
versions: lessThan: 5.9.0
status: affected
version: 0
versionType: semver 2.0.0
descriptions: supportingMedia: base64: no
type: text/html
value: <p></p><p><span style="background-color: transparent;">TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.</span></p><p></p>
value: 
TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.




problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
type: CWE
source: discovery: INTERNAL
title: Cross-site scripting vulnerability in TinyMCE