Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when content is restored. Impacts users who utilize the protect option. This vulnerability is fixed in 5.11.1, 7.9.3, and 8.5.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-29 | 1 | General1 |
| 2026-06-10 | 1 | Disclosure1 |
CVE-2026-47759 - CVE-2026-47762: Four XSS vulnerabilities in TinyMCE, 8.7 rating 🔥 Four recently disclosed Cross-Site Scripting (XSS) vulnerabilities allow remote attacker to inject malicious scripts into web pages. 👉 https://nt.ls/DRDw1
Post summary
Four newly disclosed XSS vulnerabilities in TinyMCE with an 8.7 CVSS rating are reported, but no PoC, exploit, patch, or active exploitation is mentioned.
🟠 TinyMCE, Stored XSS, #CVE-2026-47762 (Medium) -DC-May2026-26 https://dailycve.com/tinymce-stored-xss-cve-2026-47762-medium-dc-may2026-26/
Post summary
A concise notice announcing a stored XSS vulnerability in TinyMCE (CVE-2026-47762) with medium severity, but without details on exploitation, patch, or PoC.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tiny | tinymce | - | - | - |