Alta
CVE-2026-47761
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 30
Restablecer filtros
Alta
CVE-2026-47762
TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments
Alta
CVE-2026-47759
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
Alta
CVE-2026-47760
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
Media
CVE-2026-34974
phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding Leads to Stored XSS and Privilege Escalation
Media
CVE-2025-62418
bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)
Media
CVE-2025-62415
bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)
Media
ghsa-52cw-pvq9-9m5v
Silverstripe uses TinyMCE which allows svg files linked in object tags
Media
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Media
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Media
ghsa-vjwg-28gv-pm8h
Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
Media
CVE-2024-29203
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Media
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Alta
ghsa-9j5w-2cqc-cwj9
Magento LTS vulnerable to Stored XSS via TinyMCE WYSIWYG Editor
Media
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Media
CVE-2023-45819
TinyMCE XSS vulnerability in notificationManager.open API
Media
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Media
ghsa-jxcx-3h54-qqxx
SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE
Media
ghsa-4q66-g4mm-8rg5
Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE
Media
CVE-2023-30943
Moodle External Control of File Name or Path vulnerability
Media
ghsa-wqm8-jx8r-8rcq
Cross-site scripting vulnerabilities in old version of bundled TinyMCE
Media
CVE-2022-23494
Cross-site scripting vulnerability in TinyMCE alerts
Media
CVE-2019-7866
Magento 2 Community Edition XSS Vulnerability
Media
CVE-2012-6112
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.