Start for Free
nuget

TinyMCE

View on nuget registry
15 Total advisories
15 Vulnerabilities
0 Malware

Dependency scanning

Check whether TinyMCE is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 8.7
npm

CVE-2026-47759

TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
HIGH 8.7
npm

CVE-2026-47760

TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
HIGH 8.7
npm

CVE-2026-47761

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection
MEDIUM 6.1
npm

CVE-2024-38357

TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
MEDIUM 6.1
npm

CVE-2024-38356

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
MEDIUM 4.3
npm

CVE-2024-29203

TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
MEDIUM 4.3
Packagist

CVE-2024-29881

TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
MEDIUM 6.1
npm

CVE-2023-48219

TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
MEDIUM 6.1
npm

CVE-2023-45818

TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
HIGH 8.7
npm

CVE-2026-47762

TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments
MEDIUM 6.1
npm

CVE-2024-21910

Cross-site scripting vulnerability in TinyMCE plugins
UNKNOWN
npm

CVE-2024-21911

Cross-site scripting vulnerability in TinyMCE
MEDIUM 6.1
npm

CVE-2024-21908

Cross-site scripting vulnerability in TinyMCE
MEDIUM 6.1
npm

CVE-2023-45819

TinyMCE XSS vulnerability in notificationManager.open API
MEDIUM 5.4
npm

CVE-2022-23494

Cross-site scripting vulnerability in TinyMCE alerts

Browse more NuGet advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes