CVE-2024-13245

creationtimestamp| type| source ---|---|--- 2025-01-09 19:07:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113799964006953621 2025-01-09 19:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbct7l722 2025-01-09 19:22:12+00:00| seen|...

CVE-2024-13245

The Drupal CKEditor 4 LTS - WYSIWYG HTML editor is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions 1.0.0 through 1.0.0 (noted as before 1.0.1). Attackers with permission to access the CKEditor instance can in...

CVE-2024-13245 CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor 4 LTS - WYSIWYG HTML editor allows Cross-Site Scripting XSS.This issue affects CKEditor 4 LTS - WYSIWYG HTML editor: from 1.0.0 before 1.0.1...