CVE-2014-3844: tinymce color picker – CVSS 5.0 · Watchpost