Skip to content
OpenAdvisories

Package · npm

@ckeditor/ckeditor5-link

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2018-11093

    Cross-Site Scripting in @ckeditor/ckeditor5-link

    Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link (A) element.

    @ckeditor/ckeditor5-link npm