Cross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-plugin
Summary
Cross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-plugin
Original description
The description as published by the source.
ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the ckeditor-wordcount-plugin plugin for CKEditor4 is susceptible to cross-site scripting when switching to the source code mode. This issue has been addressed in version 1.17.12 of the ckeditor-wordcount-plugin plugin and users are advised to upgrade. There are no known workarounds for this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory typo3.org
- patch github.com
- patch github.com