tinymce spellchecker php vulnerabilities

Latest tinymce spellchecker php CVEs

Newest publication first

1. CVE-2012-6112 PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests

   Published 2013-01-27

   Medium·CVSS 5.0 EPSS 2.3%

   classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.