TI
Product
tinymce
by tinymce · last CVE Oct 27, 2026
7
CVEs
0
On KEV
8.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch

Add tinymce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116675
New
8.5–Oct 27
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
Affected: >= 8.5.1, < 8.9.3; >= 7.9.3, < 7.9.4
Showing 1