{"id":"EUVD-2026-32923","revision":"d04878914ee44979b0a6f2d7e4f29c32","records":[{"revision":"d04878914ee44979b0a6f2d7e4f29c32","observedAt":"2026-10-30T08:50:01.574+00:00","statement":{"source":"euvd","id":"EUVD-2026-32923","aliases":["CVE-2026-47762","GHSA-v98h-vmpc-fpqv"],"title":"TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when content is re…","description":"TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when content is restored. Impacts users who utilize the protect option. This vulnerability is fixed in 5.11.1, 7.9.3, and 8.5.1.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","score":8.7,"severity":null}],"references":["https://github.com/tinymce/tinymce/security/advisories/GHSA-v98h-vmpc-fpqv","https://www.tiny.cloud/docs/tinymce/7/7.9.3-release-notes/#overview","https://www.tiny.cloud/docs/tinymce/8/8.5.1-release-notes/#overview"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32923","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 28, 2026, 3:21:36 PM","dateUpdated":"May 28, 2026, 7:14:42 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-32923","identifiers":["EUVD-2026-32923","CVE-2026-47762","GHSA-v98h-vmpc-fpqv"]},"retained":false,"historicalAffected":[]}],"coverage":[]}