Lucene search
PRIOn knowledge basePRION:CVE-2021-41165HistoryNov 17, 2021 - 8:15 p.m.
Design/Logic Flaw
2021-11-1720:15:00
PRIOn knowledge base
www.prio-n.com
7
CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.
Related
cvelist
cvelist
osv
osv
BIT-drupal-2021-41165
2024-03-06 10:55:05
CVE-2021-41165
2021-11-17 20:15:10
HTML comments vulnerability allowing to execute JavaScript code
2021-11-17 21:58:25
github
github
HTML comments vulnerability allowing to execute JavaScript code
2021-11-17 21:58:25
nvd
nvd
CVE-2021-41165
2021-11-17 20:15:10
ubuntucve
ubuntucve
CVE-2021-41165
2021-11-17 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2021-11-18 06:48:15
cnvd
cnvd
CKEditor Cross-Site Scripting Vulnerability (CNVD-2021-92475)
2021-11-22 00:00:00
cve
cve
CVE-2021-41165
2021-11-17 20:15:10
debiancve
debiancve
CVE-2021-41165
2021-11-17 20:15:10
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2021-011
2021-11-17 00:00:00
openvas
openvas
nessus
nessus
Drupal 9.2.x < 9.2.9 Cross-Site Scripting
2021-11-25 00:00:00
Drupal 9.1.x < 9.1.14 Cross-Site Scripting
2021-11-25 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00