CVE-2023-4771 — Cross-Site Scripting vulnerability in CKSource CKEditor
A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /cke…
Published: 2023-11-16 · CVSS: 6.1 · CVSS 3.1
A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7