Tinymce vulnerabilities
We track 1 vulnerability in Tinymce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
1vulnerabilities
0critical
1high
0exploited
8.5average CVSS score
Latest Tinymce vulnerabilities
- 8.5 High severity
tinymce: Improper Neutralization of Input During Web Page Generation
TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active document before sanitization. Those elements can execute malicious scripts during pro