CKEditor cross-site scripting vulnerability

CKEditor is an open source, web-based text editor. A cross-site scripting vulnerability exists in CKEditor 5 prior to 35.0.1, which stems from updating source elements with markup from the CKEditor 5 data pipeline after destroying the editor...