Skip to content

Product

tinymce media vulnerabilities

1 published CVE affecting tinymce media, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest tinymce media CVEs

Newest publication first

  1. CVE-2013-2204 WordPress Core <= 3.5.1 - Content-Spoofing Attacks

    Published
    MediumCVSS 4.3 EPSS 2.9%

    moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a # (pound sign) character during extraction of the QUERY_STRING, which allows remote attackers to pass arbitrary parameter...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.