Dashboard / CVE-2024-21908

CVE-2024-21908

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-03 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

TinyMCE versions before 5.9.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
— — 0 < 5.9.0

References & Advisories (4)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

1.07%
Raw Score 0.010660
Percentile 65.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.01066
2026-11-12
0.01066
2026-11-10
0.01066
2026-11-09
0.01066
2026-11-08
0.01066

Intelligence Sources

mitre ref →

External Links