Skip to content
OpenAdvisories

Package · npm

ckeditor-wordcount-plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2023-37905

    Cross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-plugin

    ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addr…

    TYPO3 w8tcha CKEditor-WordCount-Plugin cms-rte-ckeditor npm