Dashboard / CVE-2024-21910

CVE-2024-21910

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-03 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

TinyMCE versions before 5.10.0 are affected by a cross-site scripting vulnerability. A remote and unauthenticated attacker could introduce crafted image or link URLs that would result in the execution of arbitrary JavaScript in an editing user's browser.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
— — 0 < 5.10.0

References & Advisories (6)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.96%
Raw Score 0.009560
Percentile 62.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00956
2026-11-12
0.00956
2026-11-10
0.00956
2026-11-09
0.00956
2026-11-08
0.00956

Intelligence Sources

mitre ref →

External Links