VulnerableCode Package Details - pkg:npm/tinymce@5.3.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:npm/tinymce@5.3.0

Essentials
History (4)

purl	pkg:npm/tinymce@5.3.0

Next non-vulnerable version	5.6.0
Latest non-vulnerable version	7.2.0
Risk

Vulnerabilities affecting this package (4)

Vulnerability	Summary	Fixed by
VCID-9brg-dm6s-2ba7 Aliases: CVE-2024-21911 GHSA-w7jx-j77m-wp65 GMS-2021-193 GMS-2021-508 GMS-2021-616	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in tinymce.	5.6.0 Affected by 0 other vulnerabilities.
VCID-cz6w-pdan-rfa4 Aliases: GHSA-vrv8-v4w8-f95h GMS-2020-789	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in tinymce.	5.4.1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-qngh-qsty-nkhh Aliases: CVE-2020-12648	Cross-site Scripting A cross-site scripting (XSS) vulnerability in TinyMCE allows remote attackers to inject arbitrary web script when configured in classic editing mode.	5.4.1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-r9zu-cdb9-8ubc Aliases: GHSA-h96f-fc7c-9r55 GMS-2021-191	Regex denial of service vulnerability in codesample plugin A regex denial of service (ReDoS) vulnerability was discovered in a dependency of the `codesample` plugin.	5.6.0 Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-04T20:43:03.560825+00:00	GitLab Importer	Affected by	VCID-r9zu-cdb9-8ubc	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/tinymce/GMS-2021-191.yml	38.6.0
2026-06-04T20:43:02.702323+00:00	GitLab Importer	Affected by	VCID-9brg-dm6s-2ba7	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/tinymce/GMS-2021-193.yml	38.6.0
2026-06-04T20:34:09.633252+00:00	GitLab Importer	Affected by	VCID-qngh-qsty-nkhh	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/tinymce/CVE-2020-12648.yml	38.6.0
2026-06-04T20:34:05.522395+00:00	GitLab Importer	Affected by	VCID-cz6w-pdan-rfa4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/tinymce/GMS-2020-789.yml	38.6.0