Beveiligingsadvies

CVE-2026-47760

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-28 15:18:22

Laatst bijgewerkt 2026-06-02 15:58:47

Toegewezen door GitHub_M

CVSS-score 8.7

Status PUBLISHED

Beschrijving

TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using nested elements can bypass attribute sanitization and execute arbitrary JavaScript. This vulnerability is fixed in 7.1.0.

← Alle CVE's bekijken Bekijk op cve.org ↗