Skip to content
OpenAdvisories

Product · CKSource

CKEditor

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Cross-Site Scripting vulnerability in CKSource CKEditor

    A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.