Skip to content

[GHSA-vg35-5wq7-3x7w] TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin data-mce-object injection#8067

Open
sbrinkhorst wants to merge 1 commit into
sbrinkhorst/advisory-improvement-8067from
sbrinkhorst-GHSA-vg35-5wq7-3x7w
Open

[GHSA-vg35-5wq7-3x7w] TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin data-mce-object injection#8067
sbrinkhorst wants to merge 1 commit into
sbrinkhorst/advisory-improvement-8067from
sbrinkhorst-GHSA-vg35-5wq7-3x7w

Commits

Commits on Jun 19, 2026