Total vulnerabilities in the database
TinyMCE versions before 5.6.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.
| Software | From | Fixed in |
|---|---|---|
| tiny / tinymce | - | 5.6.0 |