CVE-2026-116675 - TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
CVE ID :CVE-2026-116675 Published : Oct. 27, 2026, 5:16 p.m. | 1 hour, 7 minutes ago Description :TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active document before...