Cross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote malicious users to execute arbitrary JavaScript via the javascript: URI in the (1) href or (2) onmouseover attribute of the A HTML tag.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fckeditor fckeditor |