CVE-2026-116675Published

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active document before sanitization. Those elements can execute maliciou…

Exact source revision recorded 29 Oct 2026 21:50:49 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

Immutable source observations

2 recorded revisions

Each citation identifies one complete source statement. Source modification dates and the time this installation observed them are distinct. Latest history includes records historically associated by source identifiers; a removed alias is not a current equivalence claim. Exact citations show that source record's own earlier observations. Failed reads and unchanged polls do not rewrite history.

29 Oct 2026 21:50:49 UTC

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active document before sanitization. Those elements can execute maliciou…

nvd · CVE-2026-116675 · Published

27 Oct 2026 21:49:07 UTC

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active document before sanitization. Those elements can execute maliciou…

nvd · CVE-2026-116675 · Published

This citation shows only its exact record and strictly earlier observation times. Open complete latest history.