Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-25904

WordPress TinyMCE Professional Formats and Styles Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Description

Cross-Site Request Forgery (CSRF) vulnerability in David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and Styles.This issue affects TinyMCE and TinyMCE Advanced Professsional Formats and Styles: from n/a through 1.1.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and Styles

Default version status: unaffected

  • n/a to ≤ 1.1.2affected

References