Логотип exploitDog
bind:CVE-2021-41164
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-41164

Количество 5

Количество 5

ubuntu логотип

CVE-2021-41164

около 4 лет назад

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.

CVSS3: 8.2
EPSS: Низкий
nvd логотип

CVE-2021-41164

около 4 лет назад

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.

CVSS3: 8.2
EPSS: Низкий
debian логотип

CVE-2021-41164

около 4 лет назад

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions ...

CVSS3: 8.2
EPSS: Низкий
github логотип

GHSA-pvmx-g8h5-cprj

около 4 лет назад

Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

CVSS3: 8.2
EPSS: Низкий
fstec логотип

BDU:2022-02391

около 4 лет назад

Уязвимость модуля Advanced Content Filter WYSIWYG-редактора CKEditor , позволяющая нарушителю обойти существующую политику ограничения доступа для HTML-элементов

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-41164

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.

CVSS3: 8.2
0%
Низкий
около 4 лет назад
nvd логотип
CVE-2021-41164

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.

CVSS3: 8.2
0%
Низкий
около 4 лет назад
debian логотип
CVE-2021-41164

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions ...

CVSS3: 8.2
0%
Низкий
около 4 лет назад
github логотип
GHSA-pvmx-g8h5-cprj

Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

CVSS3: 8.2
0%
Низкий
около 4 лет назад
fstec логотип
BDU:2022-02391

Уязвимость модуля Advanced Content Filter WYSIWYG-редактора CKEditor , позволяющая нарушителю обойти существующую политику ограничения доступа для HTML-элементов

CVSS3: 5.4
0%
Низкий
около 4 лет назад

Уязвимостей на страницу