Security Bulletin: IBM Cúram is susceptible to a Open Source CKEditor vulnerability (CVE-2014-5191).

Summary IBM Cúram Social Program Management is vulnerable to Reflected Cross-Site ScriptingXSS. This is caused by improper sanitization of user-supplied data in the Preview Plugin for CKEditor. Vulnerability Details CVE ID: CVE-2014-5191 The Preview Plugin for CKEditor is vulnerable to cross-site...

CVE-2014-5191

Cross-site scripting XSS vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5191

Cross-site scripting XSS vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5191

CVE-2014-5191 is a CKEditor Preview plugin XSS vulnerability (CKEditor