360crest

Products

ProductCVEsExploitedLatest
TinyMCE shortcode Addon1–Jun 9, 2026

Exploited and recent CVEs

  • CVE-2026-10024 Medium 6.4 TinyMCE shortcode Addon <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btnrel' Shortcode Attribute 0.2%