| Package | Affected versions | Patched versions |
|---|---|---|
| ckeditor | = 4.0 | |
| webspellchecker | ≤ 5.5.7.5 |
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free