Lucene search
Veracode Vulnerability DatabaseVERACODE:27884HistoryNov 13, 2020 - 5:49 a.m.
Cross-Site Scripting (XSS)
2020-11-1305:49:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.003 Low
EPSS
Percentile
69.8%
ckeditor4 is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject and execute arbitrary Javascript in a user’s browser via the Color History feature.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ckeditor4 | eq | 4.15.0 | |
| ckeditor4-dev | eq | 4.15.0 | |
| ckeditor4 | eq | 4.15.0 | |
| ckeditor4-dev | eq | 4.15.0 |
Related
cve
cve
CVE-2020-27193
2020-11-12 21:15:11
prion
prion
Cross site scripting
2020-11-12 21:15:00
github
github
Improper Neutralization of Input During Web Page Generation in CKEditor4
2022-05-24 17:34:01
osv
osv
Improper Neutralization of Input During Web Page Generation in CKEditor4
2022-05-24 17:34:01
cvelist
cvelist
CVE-2020-27193
2020-11-12 20:31:41
ibm
ibm
nvd
nvd
CVE-2020-27193
2020-11-12 21:15:11
nessus
nessus
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00