CVE-2019-1010091CWE-79

tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation

published July 17, 2019

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The component is: Media element. The attack vector is: The victim must paste malicious content to media element's embed tab.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01917 · 79.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2019-07-17T16:35Z
EPSS history
Timeline
  • 17 JUL 16:35Z
    tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation
    cvelistv5