Skip to content
OpenAdvisories

Package · npm

@ckeditor/ckeditor5-html-embed

1 known vulnerabilities.

1 result · Feed

  • Medium 5.8

    Cross-site scripting caused by the editor instance destroying process in ckeditor5

    CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages in versions prior to 35.0.1. The vulnerability allowed to trigger a JavaScript code after fulfilling special c…