https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:54:43.318702+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-29881 CVE-2024-29881 — TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements 2026-10-06T02:54:43.319729+00:00

Affected: tinymce

TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content loading and content inserting code. A SVG image could be loaded though an `object` or `embed` element and that image could potentially contain a XSS payload. This vulnerability is fixed in 6.8.1 and 7.0.0.