Adobe ColdFusion CKEditor Directory Traversal (CVE-2018-15960)

A directory traversal vulnerability exists in Adobe ColdFusion CKEditor component. The vulnerability is due improper sanitation of paths before writing files. Successful exploitation of this vulnerability could allow an attacker to write files to arbitrary locations on the target system...

CVE-2015-9349

The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in old" file browser...

Cross site scripting

The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in old" file browser...

CVE-2015-9349

The vulnerability CVE-2015-9349 affects the WordPress ckeditor-for-wordpress plugin prior to 4.5.3.1, where the built-in (old) file browser exposes a reflected XSS due to insufficient validation of client-side data. Root cause: lack of proper input validation in the web application. Impact: user-...

CVE-2015-9349

The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in old" file browser...

CVE-2015-9349: Improper Neutralization of Input During Web Page Generation

The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in old" file browser...

PT-2019-7308

Name of the Vulnerable Software and Affected Versions ckeditor-for-wordpress plugin versions prior to 4.5.3.1 Description The issue concerns reflected XSS in the "built-in old" file browser. Recommendations For versions prior to 4.5.3.1, update to version 4.5.3.1 or later to resolve the issue...

Fedora Update for ckeditor FEDORA-2019-ae7f274d24

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-9870

plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements...

CVE-2019-9870

plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements...

Code injection

plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements...

CVE-2019-9870

CVE-2019-9870 affects the w8tcha CKEditor oEmbed plugin prior to 2019-03-14. The vulnerability stems from how plugin.js mishandles SCRIPT elements, enabling a NETWORK-exposed issue with LOW attack complexity and no required user interaction. NVD records CVSS v3.0 base score 9.8 (CRITICAL) with HI...

CVE-2019-9870

plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements...

CVE-2019-9870

plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements...

CVE-2019-9870: Undefined Security Weakness

plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements...

PT-2019-19904

Name of the Vulnerable Software and Affected Versions w8tcha oEmbed plugin for CKEditor versions prior to 2019-03-14 Description The issue arises from the mishandling of SCRIPT elements in the plugin.js file of the w8tcha oEmbed plugin for CKEditor. Recommendations For versions prior to 2019-03-1...

Fedora 28 : ckeditor (2019-31ad8a36d8)

CKEditor 4.11.2 Fixed Issues : - 2403: Fixed: Styling inline editor initialized inside a table with the Table Selection plugin is causing style leaks. - 2514: Fixed: Pasting table data into inline editor initialized inside a table with the Table Selection plugin inserts pasted content into the...

Fedora Update for ckeditor FEDORA-2019-31ad8a36d8

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 28 Update: ckeditor-4.11.2-1.fc28

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG edito r, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common edit ing features found on desktop editing applications like Microsoft...

[SECURITY] Fedora 29 Update: ckeditor-4.11.2-1.fc29

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG edito r, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common edit ing features found on desktop editing applications like Microsoft...