© 2025-2026 PySpect
No release of django-tinymce is currently known to be free of vulnerabilities.
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Fixed in: 5.11.0, 6.8.4, 7.2.0, 4.1.0
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Fixed in: 5.11.0, 6.8.4, 7.2.0, 4.1.0
Cross-site scripting vulnerability in TinyMCE plugins
Fixed in: 5.10.0, 3.4.0