{"affected":[{"defaultStatus":"unaffected","ecosystem":"nuget","packageName":"TinyMCE","product":"","source":"CNA: VulnCheck","vendor":"","versions":[{"lessThan":"5.9.0","status":"affected","version":"0","versionType":"semver 2.0.0"}]},{"defaultStatus":"unaffected","ecosystem":"npm","packageName":"tinymce","product":"tinymce","source":"OSV GHSA-5h9g-x5rv-25wg","vendor":"","versions":[{"events":[{"introduced":"0"},{"fixed":"5.9.0"}],"lessThan":"5.9.0","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","ecosystem":"NuGet","packageName":"TinyMCE","product":"TinyMCE","source":"OSV GHSA-5h9g-x5rv-25wg","vendor":"","versions":[{"status":"affected","version":"3.4.3.2","versionType":"NuGet"},{"status":"affected","version":"3.4.4","versionType":"NuGet"},{"status":"affected","version":"3.4.5","versionType":"NuGet"},{"status":"affected","version":"3.4.7","versionType":"NuGet"},{"status":"affected","version":"3.5.0","versionType":"NuGet"},{"status":"affected","version":"3.5.0.1","versionType":"NuGet"},{"status":"affected","version":"3.5.1","versionType":"NuGet"},{"status":"affected","version":"3.5.1.1","versionType":"NuGet"},{"status":"affected","version":"3.5.2","versionType":"NuGet"},{"status":"affected","version":"3.5.3","versionType":"NuGet"},{"status":"affected","version":"3.5.4","versionType":"NuGet"},{"status":"affected","version":"3.5.4.1","versionType":"NuGet"},{"status":"affected","version":"3.5.5","versionType":"NuGet"},{"status":"affected","version":"3.5.6","versionType":"NuGet"},{"status":"affected","version":"3.5.7","versionType":"NuGet"},{"status":"affected","version":"3.5.8","versionType":"NuGet"},{"status":"affected","version":"4.0.0","versionType":"NuGet"},{"status":"affected","version":"4.0.1","versionType":"NuGet"},{"status":"affected","version":"4.0.10","versionType":"NuGet"},{"status":"affected","version":"4.0.11","versionType":"NuGet"},{"status":"affected","version":"4.0.13","versionType":"NuGet"},{"status":"affected","version":"4.0.14","versionType":"NuGet"},{"status":"affected","version":"4.0.15","versionType":"NuGet"},{"status":"affected","version":"4.0.16","versionType":"NuGet"},{"status":"affected","version":"4.0.17","versionType":"NuGet"},{"status":"affected","version":"4.0.18","versionType":"NuGet"},{"status":"affected","version":"4.0.19","versionType":"NuGet"},{"status":"affected","version":"4.0.2","versionType":"NuGet"},{"status":"affected","version":"4.0.20","versionType":"NuGet"},{"status":"affected","version":"4.0.21","versionType":"NuGet"},{"status":"affected","version":"4.0.22","versionType":"NuGet"},{"status":"affected","version":"4.0.23","versionType":"NuGet"},{"status":"affected","version":"4.0.24","versionType":"NuGet"},{"status":"affected","version":"4.0.25","versionType":"NuGet"},{"status":"affected","version":"4.0.26","versionType":"NuGet"},{"status":"affected","version":"4.0.27","versionType":"NuGet"},{"status":"affected","version":"4.0.28","versionType":"NuGet"},{"status":"affected","version":"4.0.4","versionType":"NuGet"},{"status":"affected","version":"4.0.5","versionType":"NuGet"},{"status":"affected","version":"4.0.6","versionType":"NuGet"},{"status":"affected","version":"4.0.8","versionType":"NuGet"},{"status":"affected","version":"4.0.9","versionType":"NuGet"},{"status":"affected","version":"4.1.0","versionType":"NuGet"},{"status":"affected","version":"4.1.1","versionType":"NuGet"},{"status":"affected","version":"4.1.10","versionType":"NuGet"},{"status":"affected","version":"4.1.2","versionType":"NuGet"},{"status":"affected","version":"4.1.3","versionType":"NuGet"},{"status":"affected","version":"4.1.4","versionType":"NuGet"},{"status":"affected","version":"4.1.5","versionType":"NuGet"},{"status":"affected","version":"4.1.6","versionType":"NuGet"},{"status":"affected","version":"4.1.7","versionType":"NuGet"},{"status":"affected","version":"4.1.8","versionType":"NuGet"},{"status":"affected","version":"4.1.9","versionType":"NuGet"},{"status":"affected","version":"4.2.0","versionType":"NuGet"},{"status":"affected","version":"4.2.1","versionType":"NuGet"},{"status":"affected","version":"4.2.2","versionType":"NuGet"},{"status":"affected","version":"4.2.3","versionType":"NuGet"},{"status":"affected","version":"4.2.4","versionType":"NuGet"},{"status":"affected","version":"4.2.5","versionType":"NuGet"},{"status":"affected","version":"4.2.6","versionType":"NuGet"},{"status":"affected","version":"4.2.7","versionType":"NuGet"},{"status":"affected","version":"4.2.8","versionType":"NuGet"},{"status":"affected","version":"4.3.0","versionType":"NuGet"},{"status":"affected","version":"4.3.1","versionType":"NuGet"},{"status":"affected","version":"4.3.10","versionType":"NuGet"},{"status":"affected","version":"4.3.11","versionType":"NuGet"},{"status":"affected","version":"4.3.12","versionType":"NuGet"},{"status":"affected","version":"4.3.13","versionType":"NuGet"},{"status":"affected","version":"4.3.2","versionType":"NuGet"},{"status":"affected","version":"4.3.3","versionType":"NuGet"},{"status":"affected","version":"4.3.4","versionType":"NuGet"},{"status":"affected","version":"4.3.6","versionType":"NuGet"},{"status":"affected","version":"4.3.7","versionType":"NuGet"},{"status":"affected","version":"4.3.8","versionType":"NuGet"},{"status":"affected","version":"4.3.9","versionType":"NuGet"},{"status":"affected","version":"4.4.0","versionType":"NuGet"},{"status":"affected","version":"4.4.1","versionType":"NuGet"},{"status":"affected","version":"4.4.2","versionType":"NuGet"},{"status":"affected","version":"4.4.3","versionType":"NuGet"},{"status":"affected","version":"4.5.0","versionType":"NuGet"},{"status":"affected","version":"4.5.1","versionType":"NuGet"},{"status":"affected","version":"4.5.2","versionType":"NuGet"},{"status":"affected","version":"4.5.3","versionType":"NuGet"},{"status":"affected","version":"4.5.4","versionType":"NuGet"},{"status":"affected","version":"4.5.5","versionType":"NuGet"},{"status":"affected","version":"4.5.6","versionType":"NuGet"},{"status":"affected","version":"4.5.7","versionType":"NuGet"},{"status":"affected","version":"4.5.8","versionType":"NuGet"},{"status":"affected","version":"4.6.0","versionType":"NuGet"},{"status":"affected","version":"4.6.1","versionType":"NuGet"},{"status":"affected","version":"4.6.2","versionType":"NuGet"},{"status":"affected","version":"4.6.3","versionType":"NuGet"},{"status":"affected","version":"4.6.4","versionType":"NuGet"},{"status":"affected","version":"4.6.5","versionType":"NuGet"},{"status":"affected","version":"4.6.6","versionType":"NuGet"},{"status":"affected","version":"4.6.7","versionType":"NuGet"},{"status":"affected","version":"4.7.0","versionType":"NuGet"},{"status":"affected","version":"4.7.10","versionType":"NuGet"},{"status":"affected","version":"4.7.11","versionType":"NuGet"},{"status":"affected","version":"4.7.12","versionType":"NuGet"},{"status":"affected","version":"4.7.13","versionType":"NuGet"},{"status":"affected","version":"4.7.3","versionType":"NuGet"},{"status":"affected","version":"4.7.4","versionType":"NuGet"},{"status":"affected","version":"4.7.5","versionType":"NuGet"},{"status":"affected","version":"4.7.6","versionType":"NuGet"},{"status":"affected","version":"4.7.7","versionType":"NuGet"},{"status":"affected","version":"4.7.8","versionType":"NuGet"},{"status":"affected","version":"4.7.9","versionType":"NuGet"},{"status":"affected","version":"4.8.0","versionType":"NuGet"},{"status":"affected","version":"4.8.1","versionType":"NuGet"},{"status":"affected","version":"4.8.2","versionType":"NuGet"},{"status":"affected","version":"4.8.3","versionType":"NuGet"},{"status":"affected","version":"4.8.4","versionType":"NuGet"},{"status":"affected","version":"4.8.5","versionType":"NuGet"},{"status":"affected","version":"4.9.0","versionType":"NuGet"},{"status":"affected","version":"4.9.1","versionType":"NuGet"},{"status":"affected","version":"4.9.10","versionType":"NuGet"},{"status":"affected","version":"4.9.11","versionType":"NuGet"},{"status":"affected","version":"4.9.2","versionType":"NuGet"},{"status":"affected","version":"4.9.3","versionType":"NuGet"},{"status":"affected","version":"4.9.4","versionType":"NuGet"},{"status":"affected","version":"4.9.5","versionType":"NuGet"},{"status":"affected","version":"4.9.6","versionType":"NuGet"},{"status":"affected","version":"4.9.7","versionType":"NuGet"},{"status":"affected","version":"4.9.8","versionType":"NuGet"},{"status":"affected","version":"4.9.9","versionType":"NuGet"},{"status":"affected","version":"5.0.0","versionType":"NuGet"},{"status":"affected","version":"5.0.1","versionType":"NuGet"},{"status":"affected","version":"5.0.10","versionType":"NuGet"},{"status":"affected","version":"5.0.11","versionType":"NuGet"},{"status":"affected","version":"5.0.12","versionType":"NuGet"},{"status":"affected","version":"5.0.13","versionType":"NuGet"},{"status":"affected","version":"5.0.14","versionType":"NuGet"},{"status":"affected","version":"5.0.15","versionType":"NuGet"},{"status":"affected","version":"5.0.16","versionType":"NuGet"},{"status":"affected","version":"5.0.2","versionType":"NuGet"},{"status":"affected","version":"5.0.3","versionType":"NuGet"},{"status":"affected","version":"5.0.4","versionType":"NuGet"},{"status":"affected","version":"5.0.5","versionType":"NuGet"},{"status":"affected","version":"5.0.6","versionType":"NuGet"},{"status":"affected","version":"5.0.7","versionType":"NuGet"},{"status":"affected","version":"5.0.8","versionType":"NuGet"},{"status":"affected","version":"5.0.9","versionType":"NuGet"},{"status":"affected","version":"5.1.0","versionType":"NuGet"},{"status":"affected","version":"5.1.1","versionType":"NuGet"},{"status":"affected","version":"5.1.2","versionType":"NuGet"},{"status":"affected","version":"5.1.3","versionType":"NuGet"},{"status":"affected","version":"5.1.4","versionType":"NuGet"},{"status":"affected","version":"5.1.5","versionType":"NuGet"},{"status":"affected","version":"5.1.6","versionType":"NuGet"},{"status":"affected","version":"5.2.0","versionType":"NuGet"},{"status":"affected","version":"5.2.1","versionType":"NuGet"},{"status":"affected","version":"5.2.2","versionType":"NuGet"},{"status":"affected","version":"5.3.0","versionType":"NuGet"},{"status":"affected","version":"5.3.1","versionType":"NuGet"},{"status":"affected","version":"5.3.2","versionType":"NuGet"},{"status":"affected","version":"5.4.0","versionType":"NuGet"},{"status":"affected","version":"5.4.1","versionType":"NuGet"},{"status":"affected","version":"5.4.2","versionType":"NuGet"},{"status":"affected","version":"5.5.0","versionType":"NuGet"},{"status":"affected","version":"5.5.1","versionType":"NuGet"},{"status":"affected","version":"5.6.0","versionType":"NuGet"},{"status":"affected","version":"5.6.1","versionType":"NuGet"},{"status":"affected","version":"5.6.2","versionType":"NuGet"},{"status":"affected","version":"5.7.0","versionType":"NuGet"},{"status":"affected","version":"5.7.1","versionType":"NuGet"},{"status":"affected","version":"5.8.0","versionType":"NuGet"},{"status":"affected","version":"5.8.1","versionType":"NuGet"},{"status":"affected","version":"5.8.2","versionType":"NuGet"},{"events":[{"introduced":"0"},{"fixed":"5.9.0"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]},{"defaultStatus":"unaffected","ecosystem":"Packagist","packageName":"tinymce/tinymce","product":"tinymce/tinymce","source":"OSV GHSA-5h9g-x5rv-25wg","vendor":"","versions":[{"status":"affected","version":"4.0.0","versionType":"Packagist"},{"status":"affected","version":"4.0.1","versionType":"Packagist"},{"status":"affected","version":"4.0.10","versionType":"Packagist"},{"status":"affected","version":"4.0.11","versionType":"Packagist"},{"status":"affected","version":"4.0.12","versionType":"Packagist"},{"status":"affected","version":"4.0.13","versionType":"Packagist"},{"status":"affected","version":"4.0.14","versionType":"Packagist"},{"status":"affected","version":"4.0.15","versionType":"Packagist"},{"status":"affected","version":"4.0.16","versionType":"Packagist"},{"status":"affected","version":"4.0.17","versionType":"Packagist"},{"status":"affected","version":"4.0.18","versionType":"Packagist"},{"status":"affected","version":"4.0.19","versionType":"Packagist"},{"status":"affected","version":"4.0.2","versionType":"Packagist"},{"status":"affected","version":"4.0.20","versionType":"Packagist"},{"status":"affected","version":"4.0.21","versionType":"Packagist"},{"status":"affected","version":"4.0.22","versionType":"Packagist"},{"status":"affected","version":"4.0.23","versionType":"Packagist"},{"status":"affected","version":"4.0.24","versionType":"Packagist"},{"status":"affected","version":"4.0.25","versionType":"Packagist"},{"status":"affected","version":"4.0.26","versionType":"Packagist"},{"status":"affected","version":"4.0.27","versionType":"Packagist"},{"status":"affected","version":"4.0.28","versionType":"Packagist"},{"status":"affected","version":"4.0.3","versionType":"Packagist"},{"status":"affected","version":"4.0.4","versionType":"Packagist"},{"status":"affected","version":"4.0.5","versionType":"Packagist"},{"status":"affected","version":"4.0.6","versionType":"Packagist"},{"status":"affected","version":"4.0.7","versionType":"Packagist"},{"status":"affected","version":"4.0.8","versionType":"Packagist"},{"status":"affected","version":"4.0.9","versionType":"Packagist"},{"status":"affected","version":"4.1.0","versionType":"Packagist"},{"status":"affected","version":"4.1.1","versionType":"Packagist"},{"status":"affected","version":"4.1.10","versionType":"Packagist"},{"status":"affected","version":"4.1.2","versionType":"Packagist"},{"status":"affected","version":"4.1.3","versionType":"Packagist"},{"status":"affected","version":"4.1.4","versionType":"Packagist"},{"status":"affected","version":"4.1.5","versionType":"Packagist"},{"status":"affected","version":"4.1.6","versionType":"Packagist"},{"status":"affected","version":"4.1.7","versionType":"Packagist"},{"status":"affected","version":"4.1.8","versionType":"Packagist"},{"status":"affected","version":"4.1.9","versionType":"Packagist"},{"status":"affected","version":"4.2.0","versionType":"Packagist"},{"status":"affected","version":"4.2.1","versionType":"Packagist"},{"status":"affected","version":"4.2.2","versionType":"Packagist"},{"status":"affected","version":"4.2.3","versionType":"Packagist"},{"status":"affected","version":"4.2.4","versionType":"Packagist"},{"status":"affected","version":"4.2.5","versionType":"Packagist"},{"status":"affected","version":"4.2.6","versionType":"Packagist"},{"status":"affected","version":"4.2.7","versionType":"Packagist"},{"status":"affected","version":"4.2.8","versionType":"Packagist"},{"status":"affected","version":"4.3.0","versionType":"Packagist"},{"status":"affected","version":"4.3.1","versionType":"Packagist"},{"status":"affected","version":"4.3.10","versionType":"Packagist"},{"status":"affected","version":"4.3.11","versionType":"Packagist"},{"status":"affected","version":"4.3.12","versionType":"Packagist"},{"status":"affected","version":"4.3.13","versionType":"Packagist"},{"status":"affected","version":"4.3.2","versionType":"Packagist"},{"status":"affected","version":"4.3.3","versionType":"Packagist"},{"status":"affected","version":"4.3.4","versionType":"Packagist"},{"status":"affected","version":"4.3.6","versionType":"Packagist"},{"status":"affected","version":"4.3.7","versionType":"Packagist"},{"status":"affected","version":"4.3.8","versionType":"Packagist"},{"status":"affected","version":"4.3.9","versionType":"Packagist"},{"status":"affected","version":"4.4.0","versionType":"Packagist"},{"status":"affected","version":"4.4.1","versionType":"Packagist"},{"status":"affected","version":"4.4.2","versionType":"Packagist"},{"status":"affected","version":"4.4.3","versionType":"Packagist"},{"status":"affected","version":"4.5.0","versionType":"Packagist"},{"status":"affected","version":"4.5.1","versionType":"Packagist"},{"status":"affected","version":"4.5.12","versionType":"Packagist"},{"status":"affected","version":"4.5.2","versionType":"Packagist"},{"status":"affected","version":"4.5.3","versionType":"Packagist"},{"status":"affected","version":"4.5.4","versionType":"Packagist"},{"status":"affected","version":"4.5.5","versionType":"Packagist"},{"status":"affected","version":"4.5.6","versionType":"Packagist"},{"status":"affected","version":"4.5.7","versionType":"Packagist"},{"status":"affected","version":"4.5.8","versionType":"Packagist"},{"status":"affected","version":"4.5.9","versionType":"Packagist"},{"status":"affected","version":"4.6.0","versionType":"Packagist"},{"status":"affected","version":"4.6.1","versionType":"Packagist"},{"status":"affected","version":"4.6.2","versionType":"Packagist"},{"status":"affected","version":"4.6.3","versionType":"Packagist"},{"status":"affected","version":"4.6.4","versionType":"Packagist"},{"status":"affected","version":"4.6.5","versionType":"Packagist"},{"status":"affected","version":"4.6.6","versionType":"Packagist"},{"status":"affected","version":"4.6.7","versionType":"Packagist"},{"status":"affected","version":"4.7.0","versionType":"Packagist"},{"status":"affected","version":"4.7.1","versionType":"Packagist"},{"status":"affected","version":"4.7.10","versionType":"Packagist"},{"status":"affected","version":"4.7.11","versionType":"Packagist"},{"status":"affected","version":"4.7.12","versionType":"Packagist"},{"status":"affected","version":"4.7.13","versionType":"Packagist"},{"status":"affected","version":"4.7.2","versionType":"Packagist"},{"status":"affected","version":"4.7.3","versionType":"Packagist"},{"status":"affected","version":"4.7.4","versionType":"Packagist"},{"status":"affected","version":"4.7.5","versionType":"Packagist"},{"status":"affected","version":"4.7.6","versionType":"Packagist"},{"status":"affected","version":"4.7.7","versionType":"Packagist"},{"status":"affected","version":"4.7.8","versionType":"Packagist"},{"status":"affected","version":"4.7.9","versionType":"Packagist"},{"status":"affected","version":"4.8.0","versionType":"Packagist"},{"status":"affected","version":"4.8.1","versionType":"Packagist"},{"status":"affected","version":"4.8.2","versionType":"Packagist"},{"status":"affected","version":"4.8.3","versionType":"Packagist"},{"status":"affected","version":"4.8.4","versionType":"Packagist"},{"status":"affected","version":"4.8.5","versionType":"Packagist"},{"status":"affected","version":"4.9.0","versionType":"Packagist"},{"status":"affected","version":"4.9.1","versionType":"Packagist"},{"status":"affected","version":"4.9.10","versionType":"Packagist"},{"status":"affected","version":"4.9.11","versionType":"Packagist"},{"status":"affected","version":"4.9.2","versionType":"Packagist"},{"status":"affected","version":"4.9.3","versionType":"Packagist"},{"status":"affected","version":"4.9.4","versionType":"Packagist"},{"status":"affected","version":"4.9.5","versionType":"Packagist"},{"status":"affected","version":"4.9.6","versionType":"Packagist"},{"status":"affected","version":"4.9.7","versionType":"Packagist"},{"status":"affected","version":"4.9.8","versionType":"Packagist"},{"status":"affected","version":"4.9.9","versionType":"Packagist"},{"status":"affected","version":"5.0.0","versionType":"Packagist"},{"status":"affected","version":"5.0.1","versionType":"Packagist"},{"status":"affected","version":"5.0.10","versionType":"Packagist"},{"status":"affected","version":"5.0.11","versionType":"Packagist"},{"status":"affected","version":"5.0.12","versionType":"Packagist"},{"status":"affected","version":"5.0.13","versionType":"Packagist"},{"status":"affected","version":"5.0.14","versionType":"Packagist"},{"status":"affected","version":"5.0.15","versionType":"Packagist"},{"status":"affected","version":"5.0.16","versionType":"Packagist"},{"status":"affected","version":"5.0.2","versionType":"Packagist"},{"status":"affected","version":"5.0.3","versionType":"Packagist"},{"status":"affected","version":"5.0.4","versionType":"Packagist"},{"status":"affected","version":"5.0.5","versionType":"Packagist"},{"status":"affected","version":"5.0.6","versionType":"Packagist"},{"status":"affected","version":"5.0.7","versionType":"Packagist"},{"status":"affected","version":"5.0.8","versionType":"Packagist"},{"status":"affected","version":"5.0.9","versionType":"Packagist"},{"status":"affected","version":"5.1.0","versionType":"Packagist"},{"status":"affected","version":"5.1.1","versionType":"Packagist"},{"status":"affected","version":"5.1.2","versionType":"Packagist"},{"status":"affected","version":"5.1.3","versionType":"Packagist"},{"status":"affected","version":"5.1.4","versionType":"Packagist"},{"status":"affected","version":"5.1.5","versionType":"Packagist"},{"status":"affected","version":"5.1.6","versionType":"Packagist"},{"status":"affected","version":"5.2.0","versionType":"Packagist"},{"status":"affected","version":"5.2.1","versionType":"Packagist"},{"status":"affected","version":"5.2.2","versionType":"Packagist"},{"status":"affected","version":"5.3.0","versionType":"Packagist"},{"status":"affected","version":"5.3.1","versionType":"Packagist"},{"status":"affected","version":"5.3.2","versionType":"Packagist"},{"status":"affected","version":"5.4.0","versionType":"Packagist"},{"status":"affected","version":"5.4.1","versionType":"Packagist"},{"status":"affected","version":"5.4.2","versionType":"Packagist"},{"status":"affected","version":"5.5.0","versionType":"Packagist"},{"status":"affected","version":"5.5.1","versionType":"Packagist"},{"status":"affected","version":"5.6.0","versionType":"Packagist"},{"status":"affected","version":"5.6.1","versionType":"Packagist"},{"status":"affected","version":"5.6.2","versionType":"Packagist"},{"status":"affected","version":"5.7.0","versionType":"Packagist"},{"status":"affected","version":"5.7.1","versionType":"Packagist"},{"status":"affected","version":"5.8.0","versionType":"Packagist"},{"status":"affected","version":"5.8.1","versionType":"Packagist"},{"status":"affected","version":"5.8.2","versionType":"Packagist"},{"events":[{"introduced":"0"},{"fixed":"5.9.0"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2024-21908","cwes":["CWE-79"],"description":"TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.","epss":{"date":"2026-11-08","percentile":0.6497,"score":0.01066},"exploits":[],"kev":null,"metrics":[{"score":6.1,"severity":"medium","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794146390839,"publishedAt":1704296289664,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/tinymce/tinymce/security/advisories/GHSA-5h9g-x5rv-25wg"},{"source":"CNA: VulnCheck","tags":["related"],"url":"https://www.tiny.cloud/docs/release-notes/release-notes59/#securityfixes"},{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/advisories/GHSA-5h9g-x5rv-25wg"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-5h9g-x5rv-25wg"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://github.com/tinymce/tinymce/security/advisories/GHSA-5h9g-x5rv-25wg"},{"source":"ADP: CVE","tags":["related","x_transferred"],"url":"https://www.tiny.cloud/docs/release-notes/release-notes59/#securityfixes"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://github.com/advisories/GHSA-5h9g-x5rv-25wg"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-5h9g-x5rv-25wg"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-5h9g-x5rv-25wg"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-5h9g-x5rv-25wg"}],"remediation":[{"kind":"fix","source":"OSV GHSA-5h9g-x5rv-25wg","text":"tinymce (npm): OSV reports a fixed version 5.9.0. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-5h9g-x5rv-25wg"},{"kind":"fix","source":"OSV GHSA-5h9g-x5rv-25wg","text":"TinyMCE (NuGet): OSV reports a fixed version 5.9.0. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-5h9g-x5rv-25wg"},{"kind":"fix","source":"OSV GHSA-5h9g-x5rv-25wg","text":"tinymce/tinymce (Packagist): OSV reports a fixed version 5.9.0. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-5h9g-x5rv-25wg"}],"revision":"a7c72130dbfb35270d05b2bb9d254d4ce0e37ef75095f5f6ea23ebb9cbc16599","sources":[{"modifiedAt":1794146390839,"name":"CNA: VulnCheck","retrievedAt":1794146917017,"url":"https://www.cve.org/CVERecord?id=CVE-2024-21908"},{"modifiedAt":1783493576328,"name":"OSV / GitHub Security Advisories","retrievedAt":1794146917642,"url":"https://osv.dev/vulnerability/GHSA-5h9g-x5rv-25wg"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150528202,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-21908"}],"ssvc":{"assessedAt":1704733683396,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Cross-site scripting vulnerability in TinyMCE","updatedAt":1794150528202}