| Package | Affected versions | Patched versions |
|---|---|---|
| open link | < 1.0.7 | 1.0.7 |
ckeditor-plugin-openlink is a plugin for the CKEditor JavaScript text editor that extends the context menu with a possibility to open a link in a new tab. A vulnerability in versions of the plugin prior to 1.0.7 allowed a user to execute JavaScript code by abusing the link href attribute. The fix is available starting with version 1.0.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free