Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7797
HistoryNov 15, 2018 - 6:34 a.m.

Cross-site Scripting (XSS)

2018-11-1506:34:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.001 Low

EPSS

Percentile

44.8%

ckeditor is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the lack of sanitization on the value entered in the CKEditor source area, allowing XSS attacks to occur when switched to WYSIWYG mode.

CPENameOperatorVersion
ckeditorle4.10.0