TI-2020-07553 CVE-2020-9440 · GHSA-pv45-3557-fx76A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor…Priority LOW 30A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0131 · Published 2020-03-10 · No fix listed CWE-79