Reflected cross-site scripting (XSS) In ckeditor/ckeditor
Description
The Preview plugin in CKEditor allows Cross-site scripting (XSS) Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 4.4.3 | ||
 debian 11 | 4.4.4+dfsg1-1 | ||
debian 11 | - | ||
debian 12 | 4.4.4+dfsg1-1 | ||
debian 12 | - |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2.