2 matches found
CVE-2020-9281
A cross-site scripting XSS vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment with the ckeprotected syntax...
6.1CVSS0.04308EPSS
SaveExploits0References13
CVE-2020-9281: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment with the ckeprotected syntax...
6.1CVSS6.6AI score0.04308EPSS
SaveExploits0References14
20