Login Request a demo
TI
Product
tinymce
by tinymce · last CVE Oct 27, 2026
7
CVEs
0
On KEV
8.5
Max CVSS
1
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities7Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add tinymce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47762
5.4
0%
May 28
TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments
Affected: < 5.11.1; >= 6.0.0, <= 6.8.6; >= 7.0.0, < 7.9.3; >= 8.0.0, < 8.5.1
CVE-2026-47761
5.4
0%
May 28
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection
Affected: < 5.11.1; >= 6.0.0, <= 6.8.6; >= 7.0.0, < 7.9.3; >= 8.0.0, < 8.5.1
CVE-2026-47759
5.4
0%
May 28
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
Affected: < 5.11.1; >= 6.0.0, <= 6.8.6; >= 7.0.0, < 7.9.3; >= 8.0.0, < 8.5.1
CVE-2026-47760
5.4
0%
May 28
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
Affected: >= 6.0.0, < 7.1.0
Showing 4