TinyMCE versions before 5.9.0 are... CVE-2024-21908

- AV AC AU C I A
发布： 2024-01-03
修订： 2024-01-08

TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息