NA

CVE-2023-4771

Published: 16/11/2023 Updated: 28/11/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and previous versions. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.

Vulnerable Product Search on Vulmon Subscribe to Product

cksource ckeditor