FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-05-09 08:42:40 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
9532a361-b84d-11ee-b0d7-84a93843eb75TinyMCE -- mXSS in multiple plugins

TinyMCE reports:

Special characters in unescaped text nodes can trigger mXSS when using TinyMCE undo/redo, getContentAPI, resetContentAPI, and Autosave plugin


Discovery 2023-11-15
Entry 2024-01-23
tinymce
< 6.7.3

roundcube
< 1.6.6,1

CVE-2023-48219
https://github.com/tinymce/tinymce/security/advisories/GHSA-v626-r774-j7f8
https://github.com/roundcube/roundcubemail/releases/tag/1.6.6