CVE-2015-9349

The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in old" file browser...

WordPress ckeditor-for-wordpress plugin cross-site scripting vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. ckeditor-for-wordpress is an editor plugin used in it. A cross-site scripting vulnerability exists in the 'built-in old...

PT-2019-7308

Name of the Vulnerable Software and Affected Versions ckeditor-for-wordpress plugin versions prior to 4.5.3.1 Description The issue concerns reflected XSS in the "built-in old" file browser. Recommendations For versions prior to 4.5.3.1, update to version 4.5.3.1 or later to resolve the issue...

CVE-2015-9349: Improper Neutralization of Input During Web Page Generation

The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in old" file browser...