Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/TinyMCE@7.0.0
purl pkg:nuget/TinyMCE@7.0.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-4v71-gmu2-akgq
Aliases:
CVE-2024-38356
GHSA-9hcv-j9pv-qmph
Duplicate This advisory duplicates another.
7.2.0
Affected by 0 other vulnerabilities.
VCID-nqmt-kv4x-juhy
Aliases:
CVE-2024-38357
GHSA-w9jx-4g6g-rp7x
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements A [cross-site scripting (XSS)](https://owasp.org/www-community/attacks/xss/) vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded into the editor.
7.2.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:45:35.704601+00:00 GHSA Importer Affected by VCID-4v71-gmu2-akgq https://github.com/advisories/GHSA-9hcv-j9pv-qmph 38.6.0
2026-06-05T21:45:32.908055+00:00 GHSA Importer Affected by VCID-nqmt-kv4x-juhy https://github.com/advisories/GHSA-w9jx-4g6g-rp7x 38.6.0
2026-06-05T21:41:24.407856+00:00 GHSA Importer Fixing VCID-nztv-wcuq-jubt https://github.com/advisories/GHSA-5359-pvf2-pw78 38.6.0
2026-06-04T16:49:29.741817+00:00 GithubOSV Importer Fixing VCID-nztv-wcuq-jubt https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-5359-pvf2-pw78/GHSA-5359-pvf2-pw78.json 38.6.0
2026-06-04T16:21:58.652120+00:00 GitLab Importer Affected by VCID-nqmt-kv4x-juhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/TinyMCE/CVE-2024-38357.yml 38.6.0
2026-06-04T16:21:58.575512+00:00 GitLab Importer Affected by VCID-4v71-gmu2-akgq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/TinyMCE/CVE-2024-38356.yml 38.6.0
2026-06-02T04:47:28.169616+00:00 GitLab Importer Fixing VCID-nztv-wcuq-jubt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/TinyMCE/CVE-2024-29881.yml 38.6.0