Headline

GHSA-hxjc-9j8v-v9pr: CKEditor Cross-site Scripting vulnerability

A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user’s information.

12 months ago

ghsa

Open in Source

#xss #vulnerability #git #java #auth

CKEditor Cross-site Scripting vulnerability

Moderate severity GitHub Reviewed Published Nov 16, 2023 to the GitHub Advisory Database • Updated Nov 16, 2023

A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.

12 months ago

CVE

Open in Source

#xss #vulnerability #web #java #auth