CVE-2024-13245 CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting XSS.This issue affects CKEditor 4 LTS - WYSIWYG HTML editor: from 1.0.0 before 1.0.1...

CVE-2024-13245

The CVE-2024-13245 issue affects Drupal CKEditor 4 LTS - WYSIWYG HTML editor (CKEditor 4 LTS) where an improper neutralization of input during web page generation creates a Cross-Site Scripting (XSS) vulnerability. Affected version range is 1.0.0 up to (before) 1.0.1. Several connected sources co...

PT-2025-2084 · Unknown · Ckeditor 4 Lts

Name of the Vulnerable Software and Affected Versions: CKEditor 4 LTS - WYSIWYG HTML editor versions 1.0.0 through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This enables attackers to inject malicious...