Dashboard / CVE-2024-21911

CVE-2024-21911

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-03 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

TinyMCE versions before 5.6.0 are affected by a stored cross-site scripting vulnerability. An unauthenticated and remote attacker could insert crafted HTML into the editor resulting in arbitrary JavaScript execution in another user's browser.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
— — 0 < 5.6.0

References & Advisories (5)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

1.17%
Raw Score 0.011650
Percentile 67.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.01165
2026-11-12
0.01165
2026-11-10
0.01165
2026-11-09
0.01165
2026-11-08
0.01165

Intelligence Sources

mitre ref →

External Links