PT-2023-4803

Name of the Vulnerable Software and Affected Versions CKSource CKEditor 5 version 35.4.0 Description The issue is related to a cross-site scripting XSS vulnerability via the Full Featured CKEditor5 widget. It is noted that the vendor's position is that this is not a vulnerability, as the...

CVE-2022-48110: Improper Neutralization of Input During Web Page Generation

CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting XSS vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator who is addin...