PT-2020-20661

Name of the Vulnerable Software and Affected Versions CKEditor 4 WSC plugin versions through 5.5.7.5 Description A cross-site scripting XSS issue allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor. Recommendations For...