CVE-2020-27193

6.1

MEDIUMCVSS v3

Published

November 12, 2020

CVSS v2

4.3 MEDIUM

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.

ckeditor

NPMJavaScript WYSIWYG web text editor.

= 4.15.0NVD

CKEditor

NuGet GalleryCKEditor is a text editor to be used inside web pages.

= 4.15.0NVD

ckeditor

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

CKEditor is a WYSIWYG editor to be used inside web pages

= 4.15.0NVD

galetahub/ckeditor

GitHubCkeditor 4.x integration gem for rails

= 4.15.0NVD

Security Advisories

CVE-2020-27193

Description

More on this CVE