[ Vendor · 3 CVEs ]
tinymce
CVEs affecting tinymce published in the last 30 days, plus any tinymce CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-47762 | 28 May 2026 | CVSS 8.7 | tinymceTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments… | Fix |
| CVE-2026-47761 | 28 May 2026 | CVSS 8.7 | tinymceTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability in the media plugin. Attackers can… | Fix |
| CVE-2026-47759 | 28 May 2026 | CVSS 8.7 | tinymceTinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via unsanitized data-mce-*… | Fix |