Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using nested elements can bypass attribute sanitization and execute arbitrary JavaScript. This vulnerability is fixed in 7.1.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 TinyMCE, Cross-Site Scripting (XSS), #CVE-2026-47760 (Critical) -DC-May2026-27 https://dailycve.com/tinymce-cross-site-scripting-xss-cve-2026-47760-critical-dc-may2026-27/
Post summary
TinyMCE has a newly disclosed critical XSS vulnerability (CVE-2026-47760); the short notice provides the type, severity, and a link to an article but no PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tiny | tinymce | - | - | - |