Логотип exploitDog
bind:CVE-2022-24728
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-24728

Количество 4

Количество 4

ubuntu логотип

CVE-2022-24728

больше 3 лет назад

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2022-24728

больше 3 лет назад

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2022-24728

больше 3 лет назад

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. ...

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-4fc4-4p5g-6w89

больше 3 лет назад

Cross-site Scripting in CKEditor4

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-24728

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds.

CVSS3: 5.4
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-24728

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds.

CVSS3: 5.4
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-24728

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. ...

CVSS3: 5.4
1%
Низкий
больше 3 лет назад
github логотип
GHSA-4fc4-4p5g-6w89

Cross-site Scripting in CKEditor4

CVSS3: 5.4
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу