Back to search
CVE-2020-9440
Published: Mar 10, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
FEDORA-2020-8d5de93970
vendor-advisory
x_refsource_FEDORA
FEDORA-2020-261449d821
vendor-advisory
x_refsource_FEDORA
FEDORA-2020-a832c215bf
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now