Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4771
HistoryNov 16, 2023 - 2:15 p.m.

Cross site scripting

2023-11-1614:15:00
PRIOn knowledge base
www.prio-n.com
7
cksource ckeditor
cross-site scripting
vulnerability
versions 4.15.1
ajax.html
malicious javascript code
authorized user information

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user’s information.

CPENameOperatorVersion
ckeditorle4.15.1

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%