ckeditor4 vulnerable to cross-site scripting

🗓️ 21 Jun 2021 00:00:00Reported by RubySecType

A remote XSS in CKEditor four HTML Data Processor allows crafted comments to execute code in versions 4.14.0–4.16.x before 4.16.1.

Reporter	Title	Published	Views	Family All 57
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerability in Drupal CKEditor (CVE-2021-33829)	25 Aug 202117:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.10	29 Jul 202522:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerability in Drupal (CVE-2021-33829)	24 Aug 202118:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	25 Apr 202216:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS Next uses a CKEditor version affected by multiple vulnerabilities	17 Jan 202517:35	–	ibm
ATTACKERKB	CVE-2021-33829	9 Jun 202112:15	–	attackerkb
ArchLinux	[ASA-202106-35] drupal: cross-site scripting	15 Jun 202100:00	–	archlinux
BDU FSTEC	The vulnerability of CKEditor’s WYSIWYG editor, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.	5 Oct 202100:00	–	bdu_fstec
Circl	CVE-2021-33829	17 Dec 202507:54	–	circl