Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: CKSource Component: Ckeditor 4 Clear all filters
TI-2024-12289 CVE-2024-13245 · GHSA-2gj6-558v-rq2w

CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting (XSS).This issue affects CKEditor 4 LTS - WYSI…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00229 Published 2025-01-09 Fixed in 1.0.1 CWE-79