CVE-2018-17960

4.3

MEDIUMCVSS v2

Published

November 14, 2018

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.

NPMJavaScript WYSIWYG web text editor.

>= 4.0, < 4.11.0NVD

NuGet GalleryCKEditor is a text editor to be used inside web pages.

>= 4.0, < 4.11.0NVD

RubyGems

CKEditor is a WYSIWYG editor to be used inside web pages

>= 4.0, < 4.11.0NVD

GitHubCkeditor 4.x integration gem for rails

>= 4.0, < 4.11.0NVD