İçeriğe atla
Noroxi

Tiny kayıtları

tiny üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %4,8
Pre-auth RCE
0
Düzeltme kaydı olan
%81
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2011-4908
    56Planlayın

    TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.

    KritikCVSS 9,8SilahlaştırılmışEPSS %56

    tiny · tinybrowser12 Şub 2020

  • CVE-2011-4906
    42Planlayın

    Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    tiny · tinybrowser12 Şub 2020

  • CVE-2021-23562
    35İzleyin

    Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %1

    tiny · plupload3 Ara 2021

  • CVE-2024-24701
    35İzleyin

    WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    tiny · setka workflow28 Şub 2024

  • CVE-2019-10012
    30İzleyin

    Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a

    YüksekCVSS 7,5İstismar yokEPSS %2

    jenzabar · internet campus solution25 Mar 2019

  • CVE-2019-1010091
    25İzleyin

    tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation.

    OrtaCVSS 6,1İstismar yokEPSS %2

    tiny · tinymce17 Tem 2019

  • CVE-2020-12648
    25İzleyin

    A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configur

    OrtaCVSS 6,1İstismar yokEPSS %2

    tiny · tinymce14 Ağu 2020

  • CVE-2020-17480
    24İzleyin

    TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce10 Ağu 2020

  • CVE-2024-21911
    24İzleyin

    Cross-site scripting vulnerability in TinyMCE

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce3 Oca 2024

  • CVE-2024-21908
    24İzleyin

    Cross-site scripting vulnerability in TinyMCE

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce3 Oca 2024

  • CVE-2022-23494
    24İzleyin

    Cross-site scripting vulnerability in TinyMCE alerts

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce8 Ara 2022

  • CVE-2024-21910
    24İzleyin

    Cross-site scripting vulnerability in TinyMCE plugins

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce3 Oca 2024

  • CVE-2023-48219
    24İzleyin

    Special characters in unescaped text nodes can trigger mXSS in TinyMCE

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce15 Kas 2023

  • CVE-2024-29203
    24İzleyin

    TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce26 Mar 2024

  • CVE-2024-29881
    24İzleyin

    TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce26 Mar 2024

  • CVE-2023-45818
    24İzleyin

    Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce19 Eki 2023

  • CVE-2023-45819
    24İzleyin

    Cross-site Scripting vulnerability in TinyMCE notificationManager.open API

    OrtaCVSS 6,1İstismar yokEPSS %1

    tiny · tinymce19 Eki 2023

  • CVE-2026-47762
    21İzleyin

    TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments

    OrtaCVSS 5,4İstismar yokEPSS %0

    tiny · tinymce28 May 2026

  • CVE-2026-47759
    21İzleyin

    TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes

    OrtaCVSS 5,4İstismar yokEPSS %0

    tiny · tinymce28 May 2026

  • CVE-2026-47761
    21İzleyin

    TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    tiny · tinymce28 May 2026

  • CVE-2026-47760
    21İzleyin

    TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs

    OrtaCVSS 5,4İstismar yokEPSS %0

    tiny · tinymce28 May 2026