TI-2023-04398 CVE-2023-4771 · GHSA-wh5w-82f3-wrxh
Cross-Site Scripting vulnerability in CKSource CKEditor
Priority LOW 29
A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier.
CKSource
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
CKSource records in CISA KEVNo CKSource vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Ckeditor · all components
TI-2015-07726 CVE-2015-9349 · GHSA-whv4-9vp6-x8qc
The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.
Priority LOW 29
The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.