CVE-2021-35568

CVE-2021-35568 affects Oracle PeopleSoft Enterprise PeopleTools Rich Text Editor in versions 8.57–8.59. An unauthenticated, network-accessible attacker can exploit via HTTP; exploitation requires user interaction. Impact per sources: unauthorized update/insert/delete of some PeopleSoft data and u...

CVE-2021-35568

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Rich Text Editor. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2021-81814)

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for delivering PeopleSoft applications that are synchronized with users' needs and expectations. An unspecified vulnerability in the Rich Text Editor component in Oracle PeopleSoft Enterprise PeopleTools versions 8.57, 8.58, and 8.59...

PT-2021-20978

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.57, 8.58, and 8.59 Description: The issue affects the Rich Text Editor component of the PeopleSoft Enterprise PeopleTools product, allowing an unauthenticated attacker with network access via HTTP ...

CVE-2021-35568: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Rich Text Editor. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Oracle PeopleSoft 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for delivering PeopleSoft applications that are synchronized with users' needs and expectations. An unspecified vulnerability in the Rich Text Editor component in Oracle PeopleSoft Enterprise PeopleTools versions 8.57, 8.58, and 8.59...

The vulnerability of CKEditor’s WYSIWYG editor, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of the CKEditor WYSIWYG editor is related to the incorrect processing of the “--!” comment. Exploiting this vulnerability may allow an attacker to compromise the integrity of the data...

Fedora: Security Advisory for ckeditor (FEDORA-2021-51457da891)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: ckeditor-4.16.2-1.fc33

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

[SECURITY] Fedora 34 Update: ckeditor-4.16.2-1.fc34

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

[SECURITY] Fedora 35 Update: ckeditor-4.16.2-1.fc35

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

PortlandLabs Concrete Cms 跨站脚本漏洞

Concrete CMS is an open source content management system for teams.A stored cross-site scripting vulnerability exists in Conversations in Concrete CMS 8.5.5 and earlier versions when the "Active Conversation Editor" is set to rich text. An attacker could exploit this vulnerability to insert...

The vulnerability of the WYSIWYG Editor module of the Dolibarr resource planning and customer relationship management system allows a hacker to gain access to the administrator account.

The vulnerability of the WYSIWYG Editor module in the Dolibarr system for resource planning and managing customer relationships exists due to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to remotely gain control of the administrat...

vim post-release reuse vulnerability (CNVD-2021-99302)

Vim is a powerful and highly customizable text editor, an improved version of vi that improves upon and adds many features to Vi. vim version 8.2.3425 is vulnerable to a post-release reuse vulnerability. An attacker could exploit this vulnerability to execute code...

XSS vulnerability in wangEditor

wangEditor is a Web rich text editor . An XSS vulnerability exists in wangEditor, which can be exploited by attackers to obtain sensitive information such as user cookies...

The vulnerability of Microsoft Word’s text editor, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Shopify: Stored XSS in /admin/product and /admin/collections

Hello Security Team, I was going through previous reports of XSS and I have found this, https://hackerone.com/reports/978125 As stated by team on this page even on https://hackerone.com/shopify?type=team under Known issues that we can now report XSS under Rich Text Editor on Product description a...

The vulnerability of CodeMirror’s text editor, related to a bug in the resource consumption monitoring mechanism, allows attackers to trigger a service failure.

The vulnerability of CodeMirror’s text editor is related to a bug in the resource management mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2020-14988

An issue was discovered in Bloomreach Experience Manager brXM 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the...

CVE-2020-14988

An issue was discovered in Bloomreach Experience Manager brXM 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the...