GHSA-v27h-j97p-wqmxMedium

The Preview plugin in CKEditor allows Cross-site scripting (XSS)

Published
May 17, 2022
Last Modified
February 19, 2025

🔗 CVE IDs covered (1)

CVE-2014-5191 →

📋 Description

Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products1

  • composer/ckeditor/ckeditor:< 4.4.3

🔗 References (4)