The Preview plugin in CKEditor allows Cross-site scripting (XSS)

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2014-5191 · ADVISORY
• ckeditor/ckeditor4 commit b685874 · WEB
• ckeditor/ckeditor4-releases · PACKAGE
• ckeditor.com/node/136981 · WEB
• secunia.com/advisories/60036
• securityfocus.com/bid/69161

ckeditor/ckeditor のその他の脆弱性

• CVE-2024-43407中 6.1CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A potential vulnerability has been discovered in CKEditor 4 Code Snipp…
• CVE-2024-24815中 6.1CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core H…
• CVE-2021-41165中 5.4CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module …