Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cross-site scripting vulnerability in TinyMCE plugins
Vulnerability Description
TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Tiny Technologies TinyMCE 跨站脚本漏洞
Vulnerability Description
Tiny Technologies TinyMCE是美国Tiny Technologies公司的一款富文本编辑器。 TinyMCE 5.10.0 之前版本存在跨站脚本漏洞，该漏洞源于允许攻击者在用特制 URL 更新图像或链接时执行任意 JavaScript。
CVSS Information
N/A
Vulnerability Type
N/A