Lucene search
GoogleOSV:GHSA-HXJC-9J8V-V9PRHistoryNov 16, 2023 - 3:30 p.m.
CKEditor Cross-site Scripting vulnerability
2023-11-1615:30:20
Google
osv.dev
9
cksource ckeditor
cross-site scripting
versions 4.15.1
attacker
javascript code
ajax.html
authorized user's information
software
A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user’s information.
Related
veracode
veracode
Cross-site Scripting
2023-11-17 08:27:52
osv
osv
CVE-2023-4771
2023-11-16 14:15:28
CKEditor cross-site scripting vulnerability in AJAX sample
2024-02-07 17:34:11
cve
cve
CVE-2023-4771
2023-11-16 14:15:28
nvd
nvd
CVE-2023-4771
2023-11-16 14:15:28
cvelist
cvelist
CVE-2023-4771 Cross-Site Scripting vulnerability in CKSource CKEditor
2023-11-16 14:08:47
github
github
CKEditor cross-site scripting vulnerability in AJAX sample
2024-02-07 17:34:11
ubuntucve
ubuntucve
CVE-2023-4771
2023-11-16 00:00:00
prion
prion
Cross site scripting
2023-11-16 14:15:00
debiancve
debiancve
CVE-2023-4771
2023-11-16 14:15:28
openvas
openvas
CKEditor < 4.24.0-lts Multiple XSS Vulnerabilities - Windows
2023-11-20 00:00:00
CKEditor < 4.24.0-lts Multiple XSS Vulnerabilities - Linux
2023-11-20 00:00:00
6.8 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for OSV:GHSA-HXJC-9J8V-V9PR