Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2018-9861

Published: 19/04/2018 Updated: 18/07/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Ckeditor

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 up to and including 4.9.1; fixed in 4.9.2), as used in Drupal 8 prior to 8.4.7 and 8.5.x prior to 8.5.2 and other products, allows remote malicious users to inject arbitrary web script through a crafted IMG element.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ckeditor enhanced image

drupal drupal

Vendor Advisories

Ubuntu Security Notice: USN-5340-1: CKEditor vulnerabilities
Several security issues were fixed in CKEditor ...

References

CWE-79https://www.drupal.org/sa-core-2018-003https://github.com/ckeditor/ckeditor-dev/blob/master/CHANGES.mdhttp://www.securityfocus.com/bid/103924https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://ubuntu.com/security/notices/USN-5340-1https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook